What’s needed is a set of more wide-ranging and integrated policies developed with the participation of senior leaders from both IT and non-IT functions. For sure they should include technical approaches like dashboards for employees to track and limit their IT us, or auto-security measures such as blocking questionable email attachments. But more importantly they should include non-technical actions such on digital mindfulness such as programmes for educating employees about responsible IT use, making them aware about potential dark side effects, encouraging work-life balance and providing resources and support for dealing with things like technostress.