More likely it is the other way around -- the OSS choose to use these strategies because they were already prevalent in the organizations.

As for why they were prevalent? CYA. Surely you are not going to fire a manager who insist on inclusivity and following security protocols?