A cultural issue that many organizations face. Same reason most large companies have an infosec department that runs separately from IT.