I think this is true of most large organizations.Most government "bureaucrats" are risk averse and they believe that if they blindly follow policies and procedures they will be covered. Not necessarily their fault because its been beaten into their heads.
When teaching public policy analysis I talked about agencies being "process bound." Thinking outside the box is discouraged.