Risk management in the procurement of innovation. Concepts and empirical evidence