Risk management: How to prepare for unidentified risks