How to mitigate risk with a single source of truth