I can't disagree with the reasoning given at the beginning of the article, both IT policy and HR, when badly done absolutely can drown employees in bureaucracy. But, for me, not having some form of them risks putting employee welfare *and* customer data at risk