A process of taking steps to decrease the likelihood or the impact of the risk--this can take the form of controls/countermeasures and is usually where security practitioners are involved. a) Risk mitigation b) Threat analysis c) Incident response d) Vulnerability assessment