Research-In-Progress: An Empirical Investigation of the Decision of Whether or Not to Perform Risk Mitigation in Software Projects