As the saying goes: "One does not get promoted based on cost avoidance."
One of the reasons is that costs avoided do not show up on financial statements. On the other hand, costs incurred - including security outlays - are visible, and often become prime targets for the CFO's cost-cutting knife.