Enterprise risk management is not just a quantitative exercise. The causes of corporate catastrophes are usually not a fluctuation around a mean; rather, catastrophic risks typically reside outside the model. An attention to history and to human psychology can help identify these risks and thereby round out an ERM strategy.