My field is cybersecurity and risk management. Great article, but sadly you’re preaching to the choir. When it comes to managing any kind of risk, most people just don’t care and/or don’t have the power to do anything about it. The powers that be will always be driven by power/money and the vast majority of people don’t have the knowledge or incentive to recognize problems and do something. Most of the best risk management professionals won’t lift a finger to do anything unless they get paid well, and that means being paid by somebody who has been burned so badly, they finally have no choice and management can’t deny the need to spend money and measure results. For example the company is losing hundreds of millions of dollars to hackers, Washington DC is under water from global warming, etc.