Which of the following is the act of mitigating a particular risk?

API 580, Section 4.2 defines risk reduction as:

“Risk reduction is the act of mitigating a known risk that is deemed to be too high to a lower, more acceptable level of risk with some form of risk reduction activity.”

Risk assessment and risk determination involve identifying and evaluating risk.

Risk management is the broader process that may or may not involve mitigation.