How to Minimize the Risk of Catastrophic Failures