I've heard if the company really wants stuff to get done efficiently then they need to put a lawyer on the product team - i.e. change the incentive from "prevent engineering creating risks, even at the cost of them failing" to "help engineering manage risk whilst succeeding".