Sharing the burden: Criteria for risk allocation