Have you considered using design thinking for risk management?