Understanding Risk: a substitute for Information?