Can a corporation have too many policies and procedures?

We have discussed that from a risk perspective policies are designed to ensure the company complies with applicable laws and regulations.However, as we discussed in Module 3, if the policies are too excessive and the procedures are not practical for the employees to follow, there is a high likelihood that the business will not, wholly or in part, follow the procedures.

Consider whether the company has a higher risk of regulatory enforcement actions and litigation exposure if it has policies and/or procedures that it does not follow.

If you agree that there may be too many policies and procedures, how does a company determine the correct balance?