I'm coming to this fascinating thread a little late but would say that not adhering to acquisition regulations and policy seems to have become the 'in thing'. I typically hear of three key drivers that contribute to non-compliance occurring early and often.
(1) New-bees being trained by Old-dogs and being led down the wrong path. They (New and Old) are not intentionally 'breaking rules', they simply don't know them and don't teach them and so the problem of non-compliance is perpetuated in the culture. Unfortunately automated systems help with this.
(2) There are those in a position of authority who turn a blind eye to or request non-compliance because compliance takes time, eating into their lean workforce's capacity.
(3) There are those leaders that cannot accept that non-compliance occurs and when it does, do not want it identified nor documented. Identifying non-compliance is scorned and often the non-compliance is covered up and not treated as a learning/teaching opportunity.
Curiously, with all the various levels of audit, non-compliance is rarely identified.