Cyber R&D department in larger Corporations. Is this a fairy-tale?

Here is an observation that was coming up in a conversation recently, and I would love to gauge if it is on to something:

Every CISO/CTO is talking about the fact that there are Corporations which have R&D teams actively working on "staying on top of cyber". But no one is stating that they have such a team.

Hence, is this just something where everyone thinks that everyone else has it and, in the end, no one has it?

amp corporations cyber cybersecurity department