Common use of Mitigation identification Clause in Contracts

Mitigation identification. A mitigation (also called a treatment) is a measure taken to reduce the risk level. Such measures will often aim to reduce the likelihood of incidents, typically by reducing or removing vulnerabilities. However, other alternatives are also available, and it is common to consider four main categories of mitigations: risk reduction, risk retention, risk avoidance and risk sharing. Cyber-insurance is an example of the latter, where part of the risk is transferred to a third party.