Ask HN: Best practices for service,change and incident management?

My company is trying to rethink it's approach to these topics. Currently when you want to demand something like new server in the cluster or request a firewall permission, you have to go through a lot of categories. In example; Security -> Firewall -> Production -> New Permission. Are there any best practices for these topics where you can avoid category hell and lots of workflows?