Procurement risk response