I have worked in enough enterprises that the above is both true and false. True in the pathological cases, false among some surprising leaders. I have seen people get fired for choosing Oracle and IBM, massive investments by enterprises into Amazon cloud (they're $6b and rising), adoption of (actual) agile processes and cloud platforms.

PCI compliance is a solved problem, whether it can be used as a cloud cudgel says more about the state of knowledge and power at a place than reality.

The future is already here, it's just not evenly distributed.