technical risk mitigation