Software Architect's Handbook

Mitigating the risk

Risk mitigation of a security threat involves implementing some type of security control to mitigate the risk. The goal is to reduce or eliminate the possibility of the threat occurring and/or reduce the amount of damage that can result from the threat. There are different types of security controls that can be put in place to mitigate security risks depending on the nature of the threat.