My naive guess is that business with no tech component hire consultants, and these are part of the sales pitch.
Or governments/large organizations performing box checking exercises
Or governments/large organizations performing box checking exercises
It depends entirely on managers whether its just a blamewashing affair or actual beneficial responsibilirt.