Technology risk response