Domain-independent approach to risk reduction