Once you’ve identified the risk, how do you mitigate the risk? what