Which types of controls are BEST used to minimize the risk associated with a vulnerability?

Preventive controls are the best types of controls to minimize the risk associated with a vulnerability, because they aim to avoid or reduce the occurrence of a threat or an exploit. Preventive controls can include physical, technical, or administrative measures, such as locks, firewalls, encryption, policies, training, or backup. Preventive controls can also involve eliminating or substituting the source of the vulnerability, such as outdated software or hardware.

References

•ISACA CRISC Review Manual, 7th Edition, Domain 3: Risk Response, Section 3.2.1: Control Types

•Hazard Controls - Princeton University

•Risk Control | Techniques and Importance of Risk Control - EDUCBA