Develop an operational risk mitigation plan