Risk rating tools raise the reactivity bar