Evaluation and development of risk management principles and practices of an energy company