What factors that can cause the controls that have been established and implemented for a prolonged period of time?

Several factors can lead to the persistence of established controls over time, including organizational culture, which reinforces adherence to protocols; regulatory requirements that mandate compliance; the perceived effectiveness of the controls in mitigating risks; and the lack of significant incidents that might prompt a reevaluation or overhaul of the controls. Additionally, resistance to change among employees and stakeholders can contribute to the longevity of existing practices.