Why organisations delay action until it’s too late