What is the distribution of disruptions this system faces? Are they frequent and small, or rare and large? - Does the domain have fat-tailed risks (Chapter 4)? If so, standard risk models will underestimate the danger.