Change control processes for most organizations only come in after there is already a demonstrated need for them to be in place. Like the old saying "safety rules are written in blood." These controls are in place because someone didn't have the foresight to put them in before they were needed.
Biting the hand that feeds IT
