Protocols for communication and governance of risks