Remediation – Actions taken to adjust security access to eliminate the opportunity for risks to occur.
Mitigation – Actions taken to monitor activities when business conditions require personnel to have the opportunity to exploit weaknesses. In these cases, detective controls will be put in place where preventative security controls are too restrictive to business operations.