I've always understood risk mitigation to itself be one of the four risk treatments. The other three treatments are accept, avoid, or transfer.
@ericgeater wrote:I've always understood risk mitigation to itself be one of the four risk treatments. The other three treatments are accept, avoid, or transfer.
That too is my understanding.
In some circles, I have seen claims that "ignoring" or "denying" are additional treatments, but truly those are just cases of implicitly accepting risk. Read up on the Challenger's demise as a great example of NASA management implicitly accepting risk by denying the engineers' assessment.
For simplicity's sake, I chose to leave out "ignore" because it isn't part of the exam, nor the curriculum.
But yeah, "ignore" is a risk treatment, too. A very, very stupid risk treatment. 😆