Every successful terrorist attack is a failure of terrorism risk management. To maximize chances of success, security leaders need assessment methods driven by systematic data-driven analysis.