acquisition risk management