Mitigations
Mitigations describe measures taken to reduce the likelihood or impact of identified threats.
Mitigations can be mapped to threats, allowing teams to track how security concerns are being addressed and identify threats that still require treatment.
NOTE: Mitigations are currently undergoing changes. This documentation will be updated when the revised model is finalized.