risk mitigation, monitoring and management in software engineering