The practice of risk management in outsourcing and its impacts : an empirical investigation