Which risk mitigation strategies include outsourcing services and purchasing insurance?