As an example from a few years ago, when I hired a contract developer, the company required a "Contractor Request Form". Fine. There's payroll to setup and so on. But then one day the form was renamed to be the "Contractor SOX Compliance Request Form".
I suspect this exercise was only so that some bean counter could show the outrageous costs of "SOX compliance".
In its defense it was initially put forward as speculation ("what about this theory"), but now is being taken as fact.