Catastrophe modeling for risk management