infrastructure risk mitigation