This tweet from Mark Brooks came up on my timeline, quoting his own tweet from a while back:
Managers often respond to bad behavior by one employee by implementing policy that addresses the behavior rather than dealing with the employee.
Don’t hamstring good people with policies designed for bad people. Deal with the actual problem.
I agree with this wholeheartedly, with the nuance that ‘bad’ could be anywhere between pushing the subjective boundaries of “fiscally responsible” to doing things without integrity. For the latter, no policy will be enough. But for the former, as with any growing organization, it may be the case that ideals in behavior that may have been understood implicitly at 500 people, may have to be laid out as explicit guidelines at 10000 people. This isn’t necessarily a bad thing.