This is where context sensitive mitigation come in to play, managing risk and balancing it against business priorities, keeping all stake holders in the loop and part of the decision.