Negotiating through Risk Registers