1. Brainstorm all of the risks you can imagine. Use a premortum.
Create a definition of done.
2. Assess the risks to determine which you believe are big.
3. Create response plans for the big risks, including who owns each and what the triggers are that indicate they may happen soon.
4. Which two of these risks do you feel are showstoppers?
How would you plan a risk-based spike for one of these big risks? Perform a premortum on the other big risk you identified.