Capturing the risk in communications technology