Is innovation risky?

How do you create legal guidelines for employee innovation that are loose enough to let people try new things, but not get a publicly-held company in hot water?