A framework for the analysis of risk disclosure