Prepare and prevent: key to effective risk mitigation