Piecemeal procurement decisions are leaving organisations exposed