mitigation of risks to risk mitigation