Sadly, your probably right. Just like the field on work in cybersecurity. Even today people don’t spend that much effort on managing risk, because it’s a crappy career move and few want to take on the task. If you do a great job, the BEST thing that can happen to you is absolutely nothing.