I wonder if the higher ups are doing risk assessments on their processes. I totally understand the benefits of CD done right, but a quarter of deployments faili

I wonder if the higher ups are doing risk assessments on their processes. I totally understand the benefits of CD done right, but a quarter of deployments failing must show up on come IT compliance / audit team's radar as a risk that needs mitigation (Especially for a financial institution!!!). Hopefully we're just missing some context.