You cannot possibly manage the risk in your system if you cannot identify the risk in your system.

…but there are also unknown unknowns—the ones we don’t know we don’t know. And if one looks throughout the history of our country and other free countries, it is the latter category that tend to be the difficult ones.

Donald Rumsfeld