An organization has the following risk mitigation policies: ✑ Risks without compensating controls will be mitigated first if the risk value is greater than $50,...