When seeking to mitigate an evaluated risk, it is important to consider whether it can be mitigated for _____, _____, _____, or _____.

When seeking to mitigate an evaluated risk, it is important to consider whether it can be mitigated for _____, _____, _____, or _____.

• A. cost, time, personnel, and resources
• B. likelihood, impact, duration, and readiness
• C. probability, severity, both, or none
• D. probability, severity, both, none

Answer: (D)

Mitigating risk hinges on whether you can influence two aspects: how likely the event is to happen and how severe the consequences would be if it does. If you can lower the chance of an event occurring, you’ve mitigated probability. If you can lessen the impact if it occurs, you’ve mitigated severity. Some controls can do both, while others can’t affect either dimension, leaving you with none. The four categories you evaluate, then, are probability, severity, both, or none. In practice, many mitigation measures target probability (like good maintenance and procedures) or severity (like redundancy or emergency response), and some address both; others don’t alter either, hence none. This is why those four options best reflect how mitigation is assessed.

Mitigating risk hinges on whether you can influence two aspects: how likely the event is to happen and how severe the consequences would be if it does. If you can lower the chance of an event occurring, you’ve mitigated probability. If you can lessen the impact if it occurs, you’ve mitigated severity. Some controls can do both, while others can’t affect either dimension, leaving you with none. The four categories you evaluate, then, are probability, severity, both, or none. In practice, many mitigation measures target probability (like good maintenance and procedures) or severity (like redundancy or emergency response), and some address both; others don’t alter either, hence none. This is why those four options best reflect how mitigation is assessed.