Controls are implemented to?

A.
Eliminate risk and reduce the potential for loss.

B.
Mitigate risk and eliminate the potential for loss.

C.
Mitigate risk and reduce the potential for loss.

D.
Eliminate risk and eliminate the potential for loss.

Explanation:
That’s the essence of Controls, you put them in your environment to minimize the impact of a
potential loss, with them you can also mitigate the risk and obtain the first through this. Controls are
a very good practice to secure an environment, they should be considered by any security
professional, CISSP or not, the risk should be minimized as much as you can.