Moving from simple risk signaling to tangible risk management