management of contract risk