As to whether it's safe to assume that the worst case is unlikely, in my experience it's not safe. I often see that a worst case is not only likely, it does really happen

.
The 36 months are just a convention used in Finance. Parameters that depend on the test period, like drawdown, are usually normalized to 3 years for calculating performance figures.