Risk analysis and mitigation plans