At the highest level (at least), spreadsheets should be treated as a corporate resource. For example, if you use spreadsheets for planning then you need to do everything you can to eliminate the possibility of error. And what do you do with corporate resources? You give them to the IT department which can implement proper testing and control procedures.
The real problem, of course, is that business managers don’t know that there is a problem (actually, lots of problems) with spreadsheets, while IT regards spreadsheets as falling outside its jurisdiction. So spreadsheet management falls down a hole in the middle.