Most companies also overspend on technology they don't need. There's three components to IT management: policies, procedures and controls. The former two are almost completely neglected while most of the time, money and resources go to the latter. In the all-out IT department versus the user scenario, there's never going to be enough money to keep the network and data secure. The standard Adversarial tact only breed distrust causing breakdowns and cost increases. If businesses would start clearly defining their IT needs (communications and back-office support) they could eliminate all the extraneous crap like IM, which only creates an opportunity for exploit, wasting time and adds another item to maintain and patch.