ACQ.3.BP4: Review contract/agreement for risk mitigation actions ()