Can an organization achieve actual control on his employees, business processes and systems while dealing with his main task?

By observing organizations in the last few years we can see a very clear trend of adopting standards (such as ISO), Regulations (such as SOX) and strategies (such as IT Governance). How do you estimate this trend contribution to actual organization's self-control?