Glossary: Policies, Standards and Risk Management

current mitigations

Also written: existing controls, controls already in place

The controls already in place that lower a risk's likelihood or impact; analysis counts them only if they are proven to work against this particular threat. R-01's endpoint protection and tested backups lowered its score from 20 to 12.