I work in OT. The number of "best practice" IT mantras that companies mindlessly pick up and then slavishly follow to the detriment of their mainly-OT business is alarming.

Make your own damn best practice that suits your business best, don't copy and paste something from a megacorp. Sure, include elements from megacorp's best practice if they are applicable, but don't be a slave to the entirety of it.