Beyond the worst case scenario: ‘Managing’ the risks of extreme events