NFPA 1600 says that organizations need to develop a strategy
to mitigate those hazardous incidents and emergencies that
cannot be prevented. In general terms, your mitigation strategy
should try to limit and control the impact that hazardous incidents
and emergencies could have. According to NFPA 1600 2007
Annex A.5.5.1, your mitigation strategy should:

• Neutralize hazards.

• Remove or eliminate hazards.

• Reduce or limit the size of hazards.

• Control the rate at which hazards are released.

• Modify the nature of hazards to make them less threatening.

• Segregate hazards from vulnerable people and property.

• Use building construction standards to mitigate hazards.

• Follow rational land-use practices to avoid hazards.

• Protect information that could be exposed to hazards.

  • Protect proprietary information that could be at risk.

  • Protect competitive information that could be at risk.

• Protect structures that are exposed to hazards.

  • Relocate structures that are exposed to hazards.

  • Retrofit structures that are exposed to hazards.

  • Remove structures that are exposed to hazards.

• Use protective technologies to minimize exposure to hazards.

  • Use protective systems to minimize the exposure to hazards.

    • Use systems to minimize exposure to physical risks.

    • Use systems to minimize exposure to cyber risks.

  • Use protective equipment to minimize exposure to hazards.

    • Use equipment to minimize exposure to physical risks.

    • Use equipment to minimize exposure to cyber risks.

• Consider how each risk or hazard should be treated.

  • Consider whether or not you intend to accept the risk.

  • Consider whether or not you intend to avoid the risk.

  • Consider whether or not you intend to reduce the risk.

  • Consider whether or not you intend to transfer the risk.

    • Consider using insurance programs to transfer risk.

• Establish communication procedures to warn
  people about emerging hazards and disasters.

• Have redundant or backup resources available whenever
  they are critical or essential to the mitigation of hazards.

  • Have redundant or backup personnel available.

  • Have redundant or backup systems available.

  • Have redundant or backup equipment available.

  • Have redundant or backup operations available.

  • Have redundant or backup materials available.

  • Have redundant or backup information available.