Common Failure Modes in Real Risk Programs