I think all of that comes down to incentive design being too narrow for some central departments. Terrible outcomes for the IT department are breaches and their

I think all of that comes down to incentive design being too narrow for some central departments. Terrible outcomes for the IT department are breaches and their own work going up a lot due to lower maintainability. Another example might be the legal department where the worst outcome is the company doing something that causes legal problems. Yet, the worst outcomes for the company of missing business opportunities because we ship too late or don't ship at all because we avoid all legal risk or everyone struggling with tooling.