In some cases I know (with smaller orgs) it happens because someone put a requirement in that they need to react to incidents with the service within X hours, b

In some cases I know (with smaller orgs) it happens because someone put a requirement in that they need to react to incidents with the service within X hours, but didn't provide the budget for the employees or external service needed to have that 24/7.