Manage mitigations
Manage the mitigations that have been imported from the MITRE TAXII collections. Mitigations enable you to prevent an adversary from successfully executing techniques or sub-techniques against your organization. In STIX, mitigations are known as course of actions.
Before you begin
Role required:
- sn_ti.admin: delete access
- sn_ti.read: read access
- sn_ti.write: create, write access
Procedure
-
Navigate to All > Threat Intelligence > MITRE ATT&CK Repository > Mitigations.
The mitigations are now listed.
-
Select a mitigation to view all the associated information.
-
To view how these objects are related, select Show Relationships.
What to do next
Use the techniques module to add or modify the mitigations data.
Parent Topic:MITRE-ATT&CK administration
Related topics
Get started with MITRE-ATT&CK framework
Understand the MITRE to STIX data model
Domain separation and MITRE-ATT&CK
Set up the MITRE-ATT&CK framework
Manage CVE and technique mapping
Define the data source and detection tool mapping
Define the data source and data component mapping
Define the technique detection coverage
Map your technique detection coverage to a technique
Define the mitigation coverage
Map your mitigation coverage to a technique
Create and map detection rules
Auto-extract technique rules for importing MITRE-ATT&CK information
Review threat group and MITRE-ATT&CK techniques mapping
---
title: Manage mitigations
description: Manage the mitigations that have been imported from the MITRE TAXII collections. Mitigations enable you to prevent an adversary from successfully executing techniques or sub-techniques against your organization. In STIX, mitigations are known as course of actions.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/security-management/manage-mitigations.html
release: australia
topic_type: task
last_updated: "2026-09-10"
reading_time_minutes: 4
breadcrumb: [MITRE-ATT&CK administration, MITRE-ATT&CK framework overview, Threat Intelligence, Enterprise security case management applications, Security Operations]
---
# Manage mitigations
Manage the mitigations that have been imported from the MITRE TAXII collections. Mitigations enable you to prevent an adversary from successfully executing techniques or sub-techniques against your organization. In STIX, mitigations are known as course of actions.
## Before you begin
Role required:
- sn\_ti.admin: delete access
- sn\_ti.read: read access
- sn\_ti.write: create, write access
## Procedure
1. Navigate to **All** > **Threat Intelligence** > **MITRE ATT&CK Repository** > **Mitigations**.
The mitigations are now listed.
2. Select a mitigation to view all the associated information.
3. To view how these objects are related, select **Show Relationships**.
## What to do next
Use the [techniques module](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/view-techniques.md) to add or modify the mitigations data.
**Parent Topic:**[MITRE-ATT&CK administration](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/mitre-att-ck-administration.md)
**Related topics**
[Get started with MITRE-ATT&CK framework]()
[Understand the MITRE to STIX data model]()
[Domain separation and MITRE-ATT&CK]()
[Set up the MITRE-ATT&CK framework]()
[Manage matrices]()
[Manage techniques]()
[Manage groups]()
[Manage malware]()
[Manage tools]()
[Manage MITRE relationships]()
[Manage CVE and technique mapping]()
[Extend the MITRE-ATT&CK data]()
[Define the data source and detection tool mapping]()
[Define the data source and data component mapping]()
[Define the technique detection coverage]()
[Map your technique detection coverage to a technique]()
[Define the mitigation coverage]()
[Map your mitigation coverage to a technique]()
[Create and map detection rules]()
[Auto-extract technique rules for importing MITRE-ATT&CK information]()
[Review threat group and MITRE-ATT&CK techniques mapping]()
[Threat group to technique heatmap definition]()
[Review the MITRE-ATT&CK system properties]()
| title | Manage mitigations |
| description | Manage the mitigations that have been imported from the MITRE TAXII collections. Mitigations enable you to prevent an adversary from successfully executing techniques or sub-techniques against your organization. In STIX, mitigations are known as course of actions. |
| locale | en-US |
| canonical_url | https://www.servicenow.com/docs/r/australia/security-management/manage-mitigations.html |
| release | australia |
| topic_type | task |
| last_updated | 2026-09-10 |
| reading_time_minutes | 4 |
| breadcrumb | MITRE-ATT&CK administrationMITRE-ATT&CK framework overviewThreat IntelligenceEnterprise security case management applicationsSecurity Operations |