- Avoidance: Eliminating activities that expose the organization to risk. - Reduction: Implementing measures to reduce the likelihood or impact of risks. - Sharing: Transferring risk to third parties, such as through insurance or partnerships. - Acceptance: Acknowledging the risk and preparing to handle its impact.