contract risk analysis