Reflections on Web-Oriented Architectures for Risk Management