A multi criteria decision making approach to support the risk management: a case study