security mitigations