5.5.3.2 Risk mitigation tools