Moving from useless risk signaling to useful risk management