
381
© 2011 by Taylor & Francis Group, LLC
Chapter 10
Security Risk Mitigation
Once the security risk to an organization’s assets is known, the security risk assess-
ment team must develop recommendations to reduce this risk. ese recommen-
dations are referred to as safeguards or countermeasures. is chapter discusses the
selection of safeguards, the compiling of safeguard solution sets, justifying the
implementation of safeguards, and an understanding of the security risk param-
eters regulating the acceptance of safeguard recommendations.
10.1 Selecting Safeguards
Safeguards are selected based on their eectiveness in addressing