test?
rule/ACL/traffic munge not validated and tested on their test kit before being rolled onto the production network? for shame.
at that rate the admins will be having to fill in triplicate (or worse!) change request forms to appease the seniors...so wont be dynamic/agile in the future.
test/verify before deploying into the wild (and if you dont have a test/dev network then maybe after this event they will have....oh wait a minute..I see their ploy now! ;-) )