8. risk mitigation strategy