The question is, really, does the nonexistence of another attack prove that the programs that are in place are working?