Risk assessment and mitigation plan