Risk management practices in small and medium enterprises: Evidence from Sri Lanka · Study