If a client asks you to build a risk projection model but has highly incomplete historical data, how do you proceed?