Compliance controls are a sham. Auditing is garbage. Corporate America is made up of executives who unirononically fail to execute on anything.
The few places that do execute are: startups (nobody trusts you or your product, you have to go the extra mile) and a few corporations with strong culture.
It’s impossible for eg regulations to guarantee that corporations will follow the intent and not just check boxes. So most don’t and indeed just check boxes.
The solution is pretty easy: bring back anti trust laws. Break up the old boys’ clubs; monopolies are driving the country to the ground.