Of course there's a process.
However, as already discussed in a Reg article today (http://www.theregister.co.uk/2016/04/06/the_top_ten_things_your_users_need_to_know/ ), "self-important individuals... decide the processes and policies don't apply to them and do their own thing".
Biting the hand that feeds IT
