https://staragile.com/blog/risk-mitigation