Organizational risk mitigation involves identifying and assessing risks, creating a plan to address them, and implementing and monitoring that plan. Risks are identified by examining vulnerable areas and potential consequences. A plan is then made to handle the identified risks.