A project manager is reviewing the project's risk report. A risk regarding 'Potential non-compliance with new accessibility standards' has a high probability and high impact. <br/><br/>Which response strategy is BEST suited for this compliance risk?

Compliance risks are threats. 'Mitigate' is the most common active strategy—taking steps to ensure the standards are met (reducing probability of non-compliance). 'Transfer' (insurance) might cover fines but doesn't fix the compliance failure. 'Avoid' would mean cancelling the project or scope, which might be too extreme unless mitigation fails.