We explored the importance of risk mitigation strategies and security controls in managing and reducing risks. We also delved into security controls, emphasizing their crucial role in safeguarding systems, data, and information. We made mention of the concept of defense-in-depth, highlighting the need for a layered approach with multiple security controls for comprehensive protection.