Confidence in threat management programs is developed through cumulative failures