The term Shadow IT refers to IT devices, software and services outside the ownership or control of IT organizations. And, although the terminology makes it sound kind of shadowy or illicit in nature, Shadow IT has grown out of necessity. With the advent of Software-as-a-Service (SaaS) applications and the increasing acceptance of Bring Your Own Device (BYOD) to the office, employees are looking to get their work done in ways that seem easiest and most effective to them.
Yet, there are real risks involved. At times, certain protections and safeguards will be forfeited with Shadow IT, even though the users themselves don't realize it. Much of today's advice to IT departments for handling Shadow IT is to learn how to deal with it and coexist, rather than trying to shut it down, as outlined in this article Shadow IT: 8 Ways to Cope in InformationWeek. Clearly, a strategy that lets employees be effective, but also affords the necessary protections is needed.
This post will discuss the immense scope of the Shadow IT issue, the risks inherent with unauthorized software, and the instances where it is essential to enforce IT policies in order to enable protection strategies.
How widespread is Shadow IT?
Armed only with a credit card and a browser, anyone can purchase low-cost subscription licenses and have a new application up and running in no time at all, explains the article Managing Shadow IT in ComputerWeekly.com. Even importing corporate data and integrating with other enterprise applications can be achieved, without IT having any involvement or even awareness of new systems.
As of August 2015, in a study of large enterprise customers, Cisco determined IT departments estimate their companies are using an average of 51 cloud services, when the reality is that 730 cloud services are being used. And this challenge is only going to grow. They expect that this 15x multiplier will continue to grow as well. Cisco points out the hidden costs of Shadow IT - including greater business risk - are 4 to 8 times higher than the costs from the cloud provider.
Another study titled The Hidden Truth behind Shadow IT, conducted by Frost & Sullivan and sponsored by McAfee, found that more than 80 percent of the 600 respondents used non-approved SaaS applications in their jobs - and IT employees were the worst offenders. By their figures, the average company utilizes around 20 SaaS applications; and of these, more than seven are non-approved. With over 80 percent of employees admitting to using non-approved SaaS in their jobs, businesses clearly need to protect themselves while still enabling access to applications that help employees be more productive, said Pat Calhoun, general manager of network security at McAfee.
Where are Employees turning to Shadow IT the Most?
The Frost & Sullivan survey says non-approved SaaS encompasses every category. Business productivity (e.g., word processing, spreadsheets) is the top category, with 15% of all employees admitting to utilizing applications such as Microsoft Office 365 and Google Apps. Social media applications, led by LinkedIn and Facebook, are used by 12% of respondents, without official approval; and File Sharing, Storage, and Backup applications (including Dropbox and Apple iCloud) follow at 11%.
So What's the Risk?
Employees who deploy SaaS applications can put their organization at serious security risk of data loss, breaches, or attacks. Interestingly, approximately 40% of both IT and line-of-business respondents realize that sensitive corporate and personal data could be accessed or stolen by malicious actors or exposed to unauthorized users. About 15% of participants have either experienced or perceived a security incident-malware infection, data loss, unauthorized or blocked access-associated with using a particular SaaS application, as shown in this figure from the Frost & Sullivan survey:
From a broad perspective, the ComputerWeekly.com article outlines the four key risk of Shadow IT as:
Software Asset Management (SAM) Compliance
Governance and Standards
Lack of testing and change control
Configuration Management
Elastica, a Blue Coat Company, has published a report on Shadow Data which they define as all potentially risky data exposures lurking in cloud apps, due to lack of knowledge of the type of data being uploaded and how it is being shared. They report that of all the documents the average user stored in the cloud, 25% were broadly shared and of those, and 12.5% contained compliance-related data and source code.
Are your Mission-Critical Applications Protected?
Of course, this leads us to think about how the widespread use Shadow IT means that traditional forms of software protection, such as technology escrow, will often be bypassed when IT and procurement departments are not involved in SaaS subscriptions, and they are handled directly by employees.
Without the oversight of IT, certain protections aren't put into place, and this is particularly important for the mission-critical applications that have a significant impact on your business.
What would happen if the SaaS provider went out of business, was acquired, or failed to support your SaaS application? When an application was subscribed to by an employee acting on their own, you're out of luck. You face loss of productivity due to application downtime, loss of revenue, data loss, and potential brand damage.
On the other hand, when a mission-critical SaaS application is acquired through the IT department, a protection strategy such as SaaSProtect from Iron Mountain - a special form of technology escrow protection for SaaS applications and data - is often put into place. SaaSProtect ensures you will have access to your data and the application itself even if something were to happen to the software or the company hosting it. It gives you a
Most recent headlines
06/10/2025
France T l visions, France's leading broadcaster, has received the 2025 EBU ...
04/09/2025
Monumental Sports & Entertainment (MSE), in collaboration with Dalet, has been a...
30/08/2025
WASHINGTON The Federal Communications Commission has adopted its FY 2025 Regulatory Fees Order that establishes the regulatory fee rates for the broadcast stati...
29/08/2025
Australian Red Cross and SBS launch training to help workplaces in the fight aga...
29/08/2025
The National Film and Video Foundation (NFVF), an agency of the Department of Sp...
29/08/2025
L3Harris Technologies has concentrated decades of expertise across the entire enterprise to develop affordable and reliable best-of-breed solutions to rapidly c...
29/08/2025
BURBANK, Calif. The CW Network and the Pac-12 Conference have announced a new media rights deal that will extend their broadcast partnership beginning with the ...
29/08/2025
NEW YORK Gracenote has released a new analysis of its global video dataset showing that the number of FAST channels grew nearly 14% from Q1 2025 and 76% since 2...
29/08/2025
SAN JOSE, Calif. Harmonic has announced a series of improvements to its live sports streaming solution that the company said will improve fan engagement, protec...
29/08/2025
NEW YORK and LOS ANGELES Fox Corp. and YouTube TV last night announced a renewal of the full portfolio of Fox networks, including Fox News Channel, Fox Business...
29/08/2025
Budapest, Hungary, August 2025 - The integration of Microsoft Teams Rooms (MTR) with Lightware's Taurus universal matrix switchers delivers a new level of f...
29/08/2025
Frequency, the engine behind many of the world's best-known streaming television channels, today announced it will launch Studio Live, a next-generation uni...
29/08/2025
In an era when AI and cyber resilience are essential, Scality will mark the 10th anniversary of Scality Day on October 16, 2025 in Paris. This flagship global e...
29/08/2025
Disguise's In-House Creative and Technical Teams Pre-Visualised, Programmed and Delivered Content for the Experience, All Powered by EX 3+
Technology solu...
29/08/2025
Disguise will be demonstrating the latest workflows for TV, film and live events on a number of partner booths at the show
Disguise, the industry-leading tech...
29/08/2025
STOCKHOLM, Sweden Accedo will showcase Accedo Compose, its AI agent-powered modular orchestration layer that assists streaming providers in transitioning client...
29/08/2025
LOS ANGELES Cineverse has announced that it is working with Xperi to bring four of its streaming channels to automobiles for the first time as part of the DTS A...
29/08/2025
DALLAS & ATLANTA Gray Media has announced an agreement with the sports streaming service Victory+ to simulcast 17 Dallas Stars NHL games in 15 television market...
29/08/2025
NEW YORK AND CULVER CITY Comcast NBCUniversal and Amazon have announced new and extended distribution agreements that will expand the content available on their...
29/08/2025
FOOTHILL RANCH, Calif. RED Digital Cinema will feature its Cine-Broadcast Module supporting live broadcast workflows during IBC2025, Sept. 12-15, at the RAI Ams...
29/08/2025
29 Aug 2025
Kyivstar Rings Opening Bell at Nasdaq Marking Landmark Listing and ...
29/08/2025
More than half of all NFL games live on Sky for the first timeFriday 29 August 2025
Sky Sports has announced a new three-year deal with the NFL, extending its ...
29/08/2025
Back to All News
RIV4LRIES: The Trailer of the New Series With Samuele Carrino ...
29/08/2025
Get ready for an inspiring and emotional insight into the world of competitive Irish dancing with My Story: Tomi Champion of the World airing on RT 2 this monda...
29/08/2025
RT has today announced that David McCullagh is to be the new presenter of RT Radio 1's flagship Today programme, which airs every weekday at 10am, replaci...
28/08/2025
By Kristin Feeley, Director, Documentary Film & Artist Programs
If you want to tell untold stories, if you want to give voice to the voiceless, you've got ...
28/08/2025
Directed by Steven Bognar and Julia Reichert, Sundance Institute-supported Amer...
28/08/2025
Corridos have been a cornerstone of M sica Mexicana for generations, telling stories rooted in everyday life. Now, a new chapter is taking shape: motivational c...
28/08/2025
Los corridos han sido un pilar de la M sica Mexicana durante generaciones, contando historias enraizadas en la vida cotidiana. Ahora, un nuevo cap tulo est tom...
28/08/2025
Earlier this month, we promised our Verano Forever party would bring the heat, a...
28/08/2025
L3Harris will provide the Polish F-16V fleet with the Viper Shield electronic warfare system as part of an upgrade program....
28/08/2025
Bilbao, August 26, 2025 - AgileTV, an international television and video technol...
28/08/2025
Ken Wilkinson is an Emmy Awards nominated New York audio engineer who specialises in production sound mixing for film, commercial, episodic and documentary work...
28/08/2025
NEW YORK FuboTV today announced that it will launch Fubo Sports, a skinny bundle that focuses on sports with a subscription price of $56 monthly....
28/08/2025
NEVADA City, Calif. At IBC2025, Sept. 12-15 at the RAI Amsterdam, Telestream will debut its new Global Ingest strategy, introducing a next-generation ingest arc...
28/08/2025
Dr. Rhoda Bernard Releases Groundbreaking Debut Book on Accessible Arts Educatio...
28/08/2025
TAG Video Systems, the leader in software-based IP end-to-end workflow monitoring, deep probing, and real-time visualization, has named Oliver Gappa as Sales Di...
28/08/2025
AI-based voice enhancement will be among a series of innovations making their IBC 2025 debut on the DHD stand B46 in Hall 8 at the RAI Amsterdam Convention Cent...
28/08/2025
Telef nica Servicios Audiovisuales (TSA), the leading system integrator and service provider in the media sector in Spain, with the support of Appear, the globa...
28/08/2025
To fully immerse sailing fans in the world's biggest offshore yacht race, production company, Optical Media turned to LiveU's On-site Production solutio...
28/08/2025
Working with Calrec on its most recent overhaul, radio and television broadcaster, WNED has migrated to a fully IP infrastructure with multiple Type R consoles,...
28/08/2025
Cleeng, the Subscriber Retention Management (SRM ) inventor, has unveiled Cleeng Pro, the first-ever direct-to-consumer (D2C) subscription management platform t...
28/08/2025
Zixi, the industry leader in live broadcast-quality video over IP, today announced that French media distribution platform OKAST has selected Zixi to enable rel...
28/08/2025
Solution offers a streamlined, speaker-free architecture to optimize integration with premium external loudspeakers and advanced loudness metering
Nixer Pro Au...
28/08/2025
Cinegy, the premier provider of software-defined television technology, has announced a strategic partnership with Vision One Touch Film Production Services L.L...
28/08/2025
Telestream, a global leader in media workflow technologies, will debut its new Global Ingest strategy at IBC2025, introducing a next-generation ingest architect...
28/08/2025
Tier 1 operator selects Broadpeak to power high-performance, unified CDN solution across Norway, Sweden and Finland
Broadpeak, a leader in streaming and moneti...
28/08/2025
Leading video software provider, Synamedia, today announced that 24 Frames Digital, one of India's leading live event streaming service providers, has chose...
28/08/2025
Meet VisualOn at IBC2025: See What's Next in AI-Powered Video Streaming Join VisualOn at IBC2025 and discover how our AI-driven Optimizer and advanced media...
The term Shadow IT refers to IT devices, software and services outside the ownership or control of IT organizations. And, although the terminology makes it sound kind of shadowy or illicit in nature, Shadow IT has grown out of necessity. With the advent of Software-as-a-Service (SaaS) applications and the increasing acceptance of Bring Your Own Device (BYOD) to the office, employees are looking to get their work done in ways that seem easiest and most effective to them.
