Use worst-case scenario questions to manage risk