Managing Risk and Costs in Open Source Software Adoption