contract risk scoring