US legislation requiring listed companies to document, test and attest to their internal controls over financial reporting.
The reason immutability, audit trails and segregation of duties are hard requirements rather than good practice in this domain. It shapes nearly every technology constraint.