On risk and cost in global sourcing