Three Principles for Managing Risk in the Public Interest