If the organisation hero-worships IT then it'll never work properly, the bad eggs will do next to nothing and consider themselves above the rules that apply to other stuff.
IME that's pretty much mutually-exclusive. Either the "bad eggs" are quickly located and disposed of, or the whole department comes under suspicion and derision, and only when that which is rotten is removed will things improve.
Of course, sometimes (ok, often) the "bad eggs" are management or higher...
Biting the hand that feeds IT
