The four risk treatment strategies are: transfer (insurance, outsourcing), retention (accept risk), avoidance (discontinue activity), and reduction (mitigate controls). These are the standard options identified in risk management frameworks like ISO 27001.