Cognitive/cause mapping and scenarios in risk management