Technique · Threat modeling

Mitigation mapping

Checks whether each weakness is already mitigated by a control (validation, authorization middleware, rate limits) before reporting it.

Sub-techniques

Control inventory V1061.001

List the security controls and where they apply.
Coverage check V1061.002

Report entry points that bypass the controls.