legal risk mitigation