For IT, or for Developers? I'm not sure where to start in either case, it is so case by case.

I mean... management needs to force it. That's about the only standard step.