[ozim]

I work in risk management. What you do is time box for risk assessment where you come up in an hour or so with all kind of risks. Then you tackle things that have high chance of showing up or things that have high impact. Ideally things that have high chance and high impact are priorities.