In one of the more frightening aspects of risk management in banks the risk models they use are typically designed to measure risk in 'normal' times.  'Normal' is defined to mean they work 99% of the time.  Great!  Once a century, and just when you really need them, they are not expected to work.