Risk mitigation and risk reduction controls for providing information security are classified within three main categories, which of the following are being use...