threat-mitigation-mapping

name: threat-mitigation-mappingdescription: "Map identified threats to appropriate security controls and mitigations. Use when prioritizing security investments, creating remediation plans, or validating control effectiveness."risk: safesource: communitydate_added: "2026-02-27"

Threat Mitigation Mapping

Connect threats to controls for effective security planning.

Use this skill when

• Prioritizing security investments
• Creating remediation roadmaps
• Validating control coverage
• Designing defense-in-depth
• Security architecture review
• Risk treatment planning

Do not use this skill when

• The task is unrelated to threat mitigation mapping
• You need a different domain or tool outside this scope

Instructions

• Clarify goals, constraints, and required inputs.
• Apply relevant best practices and validate outcomes.
• Provide actionable steps and verification.
• If detailed examples are required, open resources/implementation-playbook.md.

Resources

The bundled playbook’s scores are prioritization aids, not validated risk reduction or compliance certification. Base findings on concrete threats, actual control evidence and remaining residual risk.

• resources/implementation-playbook.md for detailed patterns and examples.

Limitations

• Use this skill only when the task clearly matches the scope described above.
• Do not treat the output as a substitute for environment-specific validation, testing, or expert review.
• Stop and ask for clarification if required inputs, permissions, safety boundaries, or success criteria are missing.