The problem is that you performed the risk analysis and scenarios were created, but ignored by the decision-makers. It should have been communicated to non-expert audiences, and consensus for mitigations achieved, but it wasn’t. And now everyone is asking “Why didn’t we see this coming?”, when you know that you did see it coming.