We've probably all seen or heard of places where a developer sits around for weeks, going to standups with their status update - "waiting on license XYZ" or waiting for access to the project (git, TFS, jira, vpns etc). It's a huge problem in many orgs.
It's also a good sniff test if you're interviewing. Slow and steady might be up your alley too. There's definitely a hierarchy of security and compliance needs depending on the org, but many orgs loose the forest for the trees.