procurement risk mitigation strategy