This happens easily for big successful organisations. Over decades a strong culture aligned with how they succeed forms. Once the market changes requiring a culture change, a seemingly invincible company suddenly stumbles. They simply can’t respond even if they what they should change.
Ex. Rolls Royce CEO stated this phenomenon well: culture eats strategy for breakfast.
Makes me wonder, is either of them interested in cyber security?