how to mitigate operational risk in project management