Risk is evolving faster than the policies designed to protect against it. Here’s what happens when complexity meets boilerplate — and what smart buyers are doing about it.