too many layers for basic vendor changes

A vendor contact changed email domains and somehow it triggered procurement, cyber, legal, and our asset team lead. I understand controls exist for a reason, but this was not a new vendor or a new service. It was an email domain and a form field.