when is contractual risk transfer used