That's not to say Sesame Workshop simply approves every request that comes its way. Broadwater's organization still requires a legitimate business reason before approving certain technologies or purchases. In fact, to further governance, Broadwater established a governance steering committee that includes representatives from the legal and finance departments as well as the lines of business. The steering committee's job is to understand the needs and wants that exist in the company and to evaluate technologies and the risks associated with them.

The next step was to create a simple, actionable policy, Broadwater says.

"Don't create policies that look like a lawyer wrote it," he says. "You don't want a 10-page policy that they're not going to read. Create simple, actionable policies."

Broadwater says that it's important to keep employees up-to-date and educated. Sesame Workshop holds what it calls "Lunch and Learn" sessions about once a month to both talk about technologies and how to use them safely as well as to listen to employees. Additionally, employees who want to bring their own device to work need to attend two special training sessions before they are allowed to do so.