Which of the following is a step of the DoD Risk Management Process?

• A. Forecasting
• B. Mitigation
• C. Audit
• D. Design

Answer: (B)

In DoD risk management, mitigation means putting protective measures in place to reduce risk to an acceptable level. After hazards are identified and assessed, you develop and implement controls—engineering, administrative, or procedural—that lower either the likelihood of the hazard occurring or the severity of its consequences. This implementation of safeguards is the core action that reduces risk, and it is followed by supervision and evaluation to ensure the controls remain effective.

Forecasting isn’t a formal step in the RM process, audits assess compliance rather than reduce risk, and design belongs to system development rather than the risk-management sequence itself.