> Perhaps too many false positives and you get canned for not being able to do your job competently, then subsequently replaced by someone who can adequately assess threats?

That would be a great policy. Too bad the reality is nothing like that -- probably the opposite.