buyer risk assessment