process contracts as risk management tools