Assign mitigated risks, asses codebase for gaps.

[adamspanier]

After addressing each threat, MITIGATED threats can be divided equally among the teammates who can then canvas the code for implementations of each mitigation.