> It's pervasive in government/bigco's because they had to deal with decades of every imaginable stuff happening.

This is important: big orgs—government and private—not only have more chance of having an incident (because they deal with more events because of their scale), they are often bigger litigation targets when an event occurs, because they are giant bags of money.