Risk mitigation best practices