Miles of red tape, people make you go through long permission processes that you find out after were unnecessary. There's a good 20% who are good actors and the rest .. don't care if they obstruct business as usual, as long as they get to control everything. No one gets in trouble for obstruction, but just mention the word audit or security and they're fine to prevent as much access as possible so that their jobs are short term safer, while long term, the i d i o t s don't realize they will drive the company out of business.
Wake up you jerks you're supposed to be competing against other companies, not your own.