In a number of articles the topic of IT Policy and enforcement comes up. Generally, the issue is centered on what action an IT manager should take when becoming aware of an IT Policy violation.
For most of my decades in the industry I worked in large US corporations. In each of these there was a clear chain of management (command for military types). At any given level, a manager had a certain amount of authority and responsibility delegated to him from those above him, a authority to delegate some aspects to managers below him, and authority only within his management chain over those below.
Now it seems that many IT managers believe they have responsibility and possibly authority across multiple chains of management to set and enforce policy.
Has the corporate environment changed that much in the past 4 years? If so, has this been a positive change? What is your authority and responsibility as a manager?