What does it mean to mitigate risk?