At SmallCo, scales are small enough that most of the information systems exist in wetware. The boss knows each employee personally and where they fit, more or l

At SmallCo, scales are small enough that most of the information systems exist in wetware. The boss knows each employee personally and where they fit, more or less. You or the VM guy knows that the VM resources will not be abused. Relatively little is defined in software-backed protocol. At BigCo, there is a lot more protocol, because there has to be. The boss is physically incapable of knowing every employee personally. You are physically incapable of knowing every possible point where VMs might get used or abused. There needs to be a protocol to authorize these requests and keep a record of it. This is just the way it is, and you should understand and accept it if you want to keep working in these environments. If there are BigCo's that seem to work better, it's because they spend more resources on improving their protocols and processes, not that they magically bypassed the inherent complexity of running an organization of 10,000 people.