home/glossary/mitigation action

mitigation action

nounid 3280·updated May 9, 2026
verified

An action taken by an organization to reduce the impact of a possible problem or incident.

MWE

Attested in

NIST SP 800-171 Rev 3 - Protecting CUI in Nonfederal Systems1 citation · 1 machine-matched · observed 2026-09-01 under anchor/0.9/36451/2026-09-01
03.14.02.c.2

Classifications

Entity Type

Control92%rule-basedr:entity.control.safeguard.v1

Sensitivity

unclassified

Information Class

unclassified

Variants

synonym
mitigating action
plural
mitigation actions
possessive
mitigation action's
pluralpossessive
mitigation actions'

Framework definitions

FFIEC Cybersecurity Assessment Tool, Baseline, May 20171 senseview framework →
§1
An action taken by an organization to reduce the impact of a possible problem or incident.
NERC CIP-010-2 (Config Change Management & Vulnerability) v21 senseview framework →
§1
An action taken by an organization to reduce the impact of a possible problem or incident.
NIST SP 800-171r31 senseview framework →
§1 · attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
Increment 2: attested in 800-171r3 without a glossary definition.
Legacy lexicon import1 senseview framework →
§1 · legacy_primary
An action taken by an organization to reduce the impact of a possible problem or incident.
DR-088 backfill from the noun definition column

Outgoing relationships

No outgoing triples
This term is not the subject of any RDF-style relationship yet.

Incoming relationships

No incoming triples
No other term currently asserts a relationship to this one.