DIY sourcing risks