like, literally send a request to the board for unlimited, no restrictions stuff.

this has happened at two (2) orgs I've been at.

executives take risks and responsibility, so the CTO/CISO got sign offs from everyone and took it to the board and got full CYA in both cases, too.