effective risk mitigation