Risk mitigation in cloud migration