i guess it depends on how your org is setup... we are probably tiny compared to you guys lol... and we have a blurred line between change mgmt and security