security mitigation