Responsible buying practices in supply risk management