Risk models are a substitute for historical knowledge, because they tend to work with just three years' worth of data. But three years is not a long time in financial history.