risk mitigation tool