What type of risk control focuses on eliminating the threat entirely?

The type of risk control that focuses on eliminating the threat entirely is avoidance. This strategy involves changing plans or processes to prevent the risk from occurring in the first place. For example, if an organization identifies a risk associated with a particular process or technology, it might decide to discontinue that process or switch to a more secure technology altogether to eliminate the associated threat.

In contrast, other strategies serve different purposes. For instance, mitigation aims to reduce the impact or likelihood of a risk occurring rather than eliminating it entirely. Transfer involves shifting the risk to another party, often through insurance, which does not eliminate the risk but rather moves the burden elsewhere. Acceptance accepts the risk as is, acknowledging that it is an inherent part of the business, which also does not eliminate the risk but rather prepares the organization to manage it if it occurs.