Which is a valid response to negative risks?

Mitigation is one of the four standard responses to negative risks alongside Avoid, Transfer, and Accept. It involves taking proactive action to reduce the likelihood or consequence of a threat before it occurs, such as adopting less complex processes, conducting more tests, or choosing a more stable supplier.

Enhance is a response to positive risks (opportunities), used to increase the probability or impact of a beneficial event - not applicable to threats.

Exploit is a response to positive risks (opportunities), used to ensure an opportunity definitely occurs - not applicable to negative risks.

Share is a response to positive risks (opportunities), used to allocate ownership of an opportunity to a third party best positioned to capture it - not applicable to threats.