Typology of risk management practices: an empirical investigation into German SMEs · Study