Add to Favourites
To login click here

This article provides guidance from the U.K.’s National Cyber Security Centre on how to identify and reduce the levels of shadow IT within an organization. Shadow IT is the use of technology systems, software, applications and services within an organization without the explicit approval, knowledge or oversight of the IT department or the organization’s official IT policies. The risks associated with shadow IT are mostly the possibility of exfiltration of sensitive corporate data and malware infections that could lead to data theft or cyberespionage. The article explains that shadow IT is rarely the result of malicious intent but rather due to employees struggling to use sanctioned tools or processes to complete a specific task.