risk mitigation protocols