The size and scale of this potential hurdle is dependent on the size and scale of your organization and the market in which you operate. If you work within the service sector and have commercial obligations to meet certain SLAs, or you work within a financial institution and have regulatory guidelines to adhere to, you will be in some ways hampered in how you implement and adopt CD and DevOps. This, as they say, comes with the territory.
What you need to do is work with those setting and/or policing the rules to see what wiggle room you have. You may find that some of the rules and guidelines set in place for the business are actually overkill and have only been implemented because it was easier to stick to what it said in the book than it was to refine it to fit the business needs.
The need for such rules, guidelines, and policies...