Strategies and actions to reduce the severity or impact of potential security threats, limiting damage through risk controls, redundancies, and protective measures that break escalation chains across interconnected domains.