Consider this scenario. It’s Tuesday, and your change advisory board (CAB) signs off on revoking a service account’s elevated privileges, rotating an encryption key, or clearing a legal hold. But the actual change cannot touch production until the Saturday night maintenance window.