2. TechnologyOnce the policies are in place, the tools should be set to reflect it. This could mean implementing restrictions on accounts or groups, or having specific types of workflows to suit your industry.

For instance some countries require financial companies to maintain a record of every conversation, including digital messages.

For these kinds of regulated industries, maintaining a document trail would be paramount -- and would need to be incorporated into the technology that is used.

"It's not just about the latest coolest toys, it has to be about business outcomes," says Horran.

3. EducationThe policy and technology alone are not enough, says Horran. There has to be an active education program to teach employees about both.