How can firms mitigate risks of a human rights lawsuit?