Many companies and government agencies adopt a "top-down" approach in setting IT policy, making sure technology is secure before approving it for organization-wide use. Some, conversely, employ a "bottom-up" approach, allowing individuals and offices to innovate, and then adopting those experiments that...