Developing a risk management model in travel agencies activity: an empirical analysis