What is risk mitigation in the context of SFTRG area security?

• A. The ultimate elimination of all threats.
• B. The process of reducing probability or impact of threats through mitigations like coverage, training, procedures, and awareness.
• C. Ignoring threats.
• D. Relying solely on technology.

Answer: (B)

Risk mitigation in SFTRG area security focuses on reducing either the likelihood that a threat occurs or the harm it could cause by putting in place practical controls. The described approach shows how to lower risk through mitigations such as coverage (patrols, sensors, access controls), training (staff readiness and drills), procedures (clear SOPs and escalation paths), and awareness (security briefings and tip lines). This layered strategy—often called defense in depth—addresses both what could happen and how badly it could affect operations, making the security posture more resilient. It’s realistic because threats can’t be eliminated entirely, and relying solely on technology or ignoring risks leaves gaps that people and processes must fill. For example, combining physical coverage with proper training and documented procedures reduces both the chance of an incident and the impact if one occurs.