Mitigation
The specific control that closes or reduces a given attack path, plus the residual risk that remains after it is applied.
Defined in 2 GAGE programs, which carry 3 distinct definitions of it. The wording above is taught in Agentic AI Governance: Applied Mastery.
How each discipline defines it
The same term does different work depending on who is using it. These are the definitions as each program teaches them, unedited.
A specific, implementable design change intended to prevent a failure mode outright, detect it and contain its effect, or allow the system to degrade gracefully through it. A mitigation is distinct from simply documenting a risk; it requires an actual change to the system's design or behavior.
The specific control that closes or reduces a given attack path, plus the residual risk that remains after it is applied.
A change that reduces the likelihood or severity of a failure without fully closing the underlying gap that allows it, distinguished from a full corrective action by failing the second half of the counterfactual test.
Where it is taught
The exact lessons this term appears in. The first 7 topics of every program are free with a free account.
- Dossier Workshop E, Control Architecture and Threat Model · Technical Controls and Threat Modeling, Agentic AI Governance: Applied Mastery
Terms it appears with
Not an alphabetical neighbourhood: these are the terms taught in the same lessons, ranked by how often they appear together.