What would you do if a program risk was identified late in development and needed immediate mitigation?