2.1: Risk assessment and mitigation plan