Basically reduces the risks existing in
an organization by either reducing the hazard or vulnerability. Preparedness, mitigation and prevention are the component of risk reduction. The mitigation may be of technological or non- technological like legal frame works, training, etc.