How successfully have institutions managed risks from novel technology in the past?