Lea MunyonIS3350 week 9 assignment1Risk mitigation also called risk reduction, is a systematic reduction in the extent of exposure to a risk and/or the likelihood of its occurrence. Risk mitigation measures are basically controls which needs to be monitored, managedand will have to have a contingency plan(s) in case there is an incursion.There are three basic control(s) which can be used in unison with other controls. They are physical, technical and/or electronic, and procedural controls. Physical controls are those designed to deny access to unauthorized personnel, which includes attacker from physically accessing the school’s building, facility, resources or stored information .Develop a good designed control structure to resist potentially hostile acts.An itemized policies developed by administration and a step by step process for incident responses when the risk is actualized. Compliance to FERPA should be an objective in the production of policies.