Regulatory Treatment of Risk: Management and Allocation