[nunez]

It's less stupidity and more "if we don't prove that we meet x control in y compliance framework, our auditors will deem us non-compliant and we will be fined into oblivion"

[Spooky23]

Or “my bonus depends on metric x being above y”

Smart leaders know how to balance it. The stupid work to rule

[ocodo]

I mean, it's still stupidity, but it's upstream stupidity with the ability to punish.

So, snafu.