The pre-mortem strategy involves envisioning that your project has failed to identify weaknesses and plan for prevention. The role of counterfactuals and pre-mortems come from military strategy and can also be applied to cyber-security.