> A lot of time is spent provisioning machines, white listing ips, setting up VPNs That sounds as if the person dealing with it would be completely incapable

> A lot of time is spent provisioning machines, white listing ips, setting up VPNs That sounds as if the person dealing with it would be completely incapable of replacing a failing dev. system in a timely manner. Keep a few replacement systems ready and your IT has all the time in the world to deal with those issues without blocking anything important. I can just imagine the people responsible for that mess dealing with cloud services: I am sorry but we used up all the cloud licenses management signed of on, we will push for more licenses on the next quarterly budget meeting until then have these leftover sheets of paper and this dried out pen from our office supplies.