Translating test results into risk