finishing up security with mitigation