Risk reduction: The process of decreasing the potential damage or loss from a risk through preventative measures or actions. This could involve applying controls or safeguards to reduce vulnerabilities, transferring the risk to another party, or avoiding the risk altogether. The aim of risk reduction is to lessen the probability of occurrence or the impact severity of a risk to an acceptable level.
Categories: CC D1: Security Principles | CCSP D6: Legal - Risk and Compliance | CISM D2: Information security risk management | CISSP D1: Security and Risk Management | Security+ D5: Security Program Management and Oversight | SSCP D3: Risk Identification Monitoring and Analysis
« Back to Glossary Index