There is now such a huge bureaucracy of overpaid grey-suited ones involved in security that there are several complete Departments of Thinking Up What To Do Next. They obviously have to justify their own existence otherwise they lose their jobs.
As they still only know how to shuffle papers they then have to employ reams of "Consultants", who are of course only too happy to go along with it as otherwise they are out of the gravy train as well.
Do not think this is in any way connected with security, other than a means to milk the security budget before somebody else comes up with a way to do it.