“A classic risk management technique involves imagining a catastrophic failure and then backing your way into discovering risks that could lead to that failure.”