Your point, well observed, is that there are very little repercussions. It is becoming important and more prominent (than say 10 years ago) due to constant medi

Your point, well observed, is that there are very little repercussions. It is becoming important and more prominent (than say 10 years ago) due to constant media exposure and the constant breaches being seen, so there are a lot of roles being opened and functions are being built where there weren't any before. As a whole though, businesses will deprioritize security for increased business performance, which you can understand. Regulations like GDPR coming along should have some bite to get people into action, but until that's actually observed there's not much going on.