Risk Management - Concept
Shadow IT
Technology used by teams without going through the organisation’s normal approval or management process
What's it for?
Highlights technology being used outside normal oversight, where cost, security and information can become harder to control.
For example…
A team buys its own survey tool without involving the technology team
A team uploads customer data to an unapproved file-sharing app because it is easier than the official tool, creating shadow IT outside normal security controls
Think of it like…
It's side roads that appear because the main highway has tolls and queues—faster locally, messy for the whole city map