Threat Mitigation Mapping skill: what it does and how to install it

What it does. Maps threats to preventive, detective and corrective controls across network, application, data, endpoint and process layers. It supports defence-in-depth planning, control effectiveness reviews, risk treatment and remediation roadmaps, with templates for summaries, gaps, recommendations and implementation plans.

When to use it. For security architecture reviews, investment prioritisation, remediation planning, control coverage validation and risk treatment. Apply it when threats need to be connected to tested, layered mitigations rather than single controls.