In many companies changes must be reviewed for compliance reasons (e.g., SOC2 will generally require some sort of review procedure).