risk mitigation HR