Risk management failures show how various types of risk management failures occur. Because of the limitations of past data in assessing the probability and the implications of a financial crisis, we conclude that financial institutions should use scenarios for credible financial crisis threats even if they perceive the probability of such events to be extremely small.