A Theory of Risk Disclosure