Risk mitigation strategy and threat analysis