Mitigation
Mitigation is an action or measure intended to reduce the likelihood, severity, duration, or impact of a risk or unwanted outcome.
Data-Driven Cybersecurity
The application of actions that reduce the likelihood or impact of an identified risk.
- How it is used
- Directs actions and scarce resources toward reducing identified cybersecurity risks and their effects.
- How deep it goes
- Defines mitigation, distinguishes response choices, and illustrates technical, management, and operational actions; it does not prescribe one universal treatment.
- Examples
- Uses before-and-after risk dashboards and a patch-management scenario to compare targets with remaining exposure.
- What you can do after
- Practice/perform it by selecting risk-reduction actions, checking dashboard results against targets, and prioritizing unresolved severe risks.
Acing the CCNA Exam: Volume 2 Advanced Networking and Security
A mitigation technique is a measure that reduces the likelihood or impact of a security threat or vulnerability.
- How it is used
- Frames protective measures as the response to threats exploiting vulnerabilities in networked systems.
- How deep it goes
- Defines mitigation alongside threats, vulnerabilities, and exploits, then illustrates it without configuration or verification procedures.
- Examples
- Uses metal bars over house windows and DHCP Snooping protecting a network protocol as examples.
- What you can do after
- Evaluate security terminology and identify a protective measure against a network threat.
Read how Acing the CCNA Exam: Volume 2 Advanced Networking and Security explains mitigation →
Delivering Machine Learning Projects: From design to deployment
A mitigation is an action or measure intended to reduce the likelihood or impact of a risk.
- How it is used
- Reduces project risk by turning threats into budgeted, assigned, documented, and reviewable actions.
- How deep it goes
- Details identification, confidence pricing, escalation, documentation, scope changes, emergency reporting, and post-incident prevention.
- Examples
- Uses GPU delays, unavailable team members, replanning, contractors, emergency spreadsheets, backup plans, and reporting cadences.
- What you can do after
- Operate a risk register with priced responses, confidence levels, owners, escalation paths, documented decisions, and follow-up reviews.
Read how Delivering Machine Learning Projects: From design to deployment explains mitigation →
Think Like a Software Engineering Manager
Risk mitigation is the practice of reducing the likelihood or impact of potential problems that could affect objectives or operations.
- How it is used
- Uses early communication, backup planning, ownership, and documentation to manage risks in expectations, launches, and cross-functional work.
- How deep it goes
- Explains practical planning steps and trade-offs through workplace scenarios, without detailing formal risk analysis methods.
- Examples
- Uses a supported production deployment, a trimmed operational readiness document, and documented expectation-setting conversations.
- What you can do after
- Apply risk mitigation by identifying obstacles, agreeing on support or alternatives, assigning ownership, and reviewing plans.
Read how Think Like a Software Engineering Manager explains mitigation →
Related concepts
- backward recoveryincludes · Backward recovery is a failure-mitigation strategy that returns a system from an illegal intermediate state to a state equivalent to its initial legal state.
- DHCP snoopingincludes · DHCP snooping is a network security feature that filters DHCP messages and builds trusted bindings between clients and assigned addresses.
- exceptionpart of · An exception is a runtime signal or object representing an abnormal condition that interrupts ordinary program flow and may be handled or propagated.
- risk acceptancecontrasts with · Risk acceptance is a risk treatment strategy in which an organization consciously retains a risk and its potential consequences without additional controls or intervention.
- riskaddresses · Risk is the possibility and potential impact of an adverse outcome arising from uncertainty.
These guides are generated from the text of Manning books by Manning's knowledge graph and link to the sections they draw on. The full books are available on liveBook and at manning.com.