How to reduce compliance risk in procurement contracts?