Risk mitigation involves implementing controls to reduce the likelihood or impact of a risk.