Supply risk management: model development and empirical analysis