Totally. I'm not on one side or the other from an idealogical standpoint.. it seems like there are some large organizations that do enough good with their size

Totally. I'm not on one side or the other from an idealogical standpoint.. it seems like there are some large organizations that do enough good with their size to make up for the downfalls that come along with it.. I just haven't been at one of those. With respect to functions like IT, I'd imagine the department needs to do what other functions in a large organization do in order to remain effective and useful... decompose. It seems like distributing things like risk management, and the security of assets among parts of the organization effectively gets the organization closer to looking like a bunch of smaller, more effective organizations who collaborate... and mitigates risk. The idea of a monolithic IT function in a giant organization providing more safety than a distributed version of the same idea seems on it's face a misplaced comfort. Then again, I'm really not someone who knows enough about what it takes to run an IT department to be suggesting such a thing.