How to evaluate the risk of outsourcing locations