FICAM includes a "Mitigation" category under Governance

[mikebrownlie]

Should we add mitigation to the GC ICAM framework.

FICAM has:
Mitigation
Correct the problems and address risks, discovered by analysis, that may occur during
standard operations.
Keywords: Redress, Remediation

from another document, these related comments:

Redress | Fixing problems and vulnerabilities that occur during standard operation of an ICAM program

Recovery | Preparing the procedures and assets that would be needed to recover from a security or privacy breach and ensure continuity of service