Effective communication about risk