Project procurement and risk management