Identifying, quantifying and dealing with high-impact risks