The term Shadow IT refers to IT devices, software and services outside the ownership or control of IT organizations. And, although the terminology makes it sound kind of shadowy or illicit in nature, Shadow IT has grown out of necessity. With the advent of Software-as-a-Service (SaaS) applications and the increasing acceptance of Bring Your Own Device (BYOD) to the office, employees are looking to get their work done in ways that seem easiest and most effective to them.
Yet, there are real risks involved. At times, certain protections and safeguards will be forfeited with Shadow IT, even though the users themselves don't realize it. Much of today's advice to IT departments for handling Shadow IT is to learn how to deal with it and coexist, rather than trying to shut it down, as outlined in this article Shadow IT: 8 Ways to Cope in InformationWeek. Clearly, a strategy that lets employees be effective, but also affords the necessary protections is needed.
This post will discuss the immense scope of the Shadow IT issue, the risks inherent with unauthorized software, and the instances where it is essential to enforce IT policies in order to enable protection strategies.
How widespread is Shadow IT?
Armed only with a credit card and a browser, anyone can purchase low-cost subscription licenses and have a new application up and running in no time at all, explains the article Managing Shadow IT in ComputerWeekly.com. Even importing corporate data and integrating with other enterprise applications can be achieved, without IT having any involvement or even awareness of new systems.
As of August 2015, in a study of large enterprise customers, Cisco determined IT departments estimate their companies are using an average of 51 cloud services, when the reality is that 730 cloud services are being used. And this challenge is only going to grow. They expect that this 15x multiplier will continue to grow as well. Cisco points out the hidden costs of Shadow IT - including greater business risk - are 4 to 8 times higher than the costs from the cloud provider.
Another study titled The Hidden Truth behind Shadow IT, conducted by Frost & Sullivan and sponsored by McAfee, found that more than 80 percent of the 600 respondents used non-approved SaaS applications in their jobs - and IT employees were the worst offenders. By their figures, the average company utilizes around 20 SaaS applications; and of these, more than seven are non-approved. With over 80 percent of employees admitting to using non-approved SaaS in their jobs, businesses clearly need to protect themselves while still enabling access to applications that help employees be more productive, said Pat Calhoun, general manager of network security at McAfee.
Where are Employees turning to Shadow IT the Most?
The Frost & Sullivan survey says non-approved SaaS encompasses every category. Business productivity (e.g., word processing, spreadsheets) is the top category, with 15% of all employees admitting to utilizing applications such as Microsoft Office 365 and Google Apps. Social media applications, led by LinkedIn and Facebook, are used by 12% of respondents, without official approval; and File Sharing, Storage, and Backup applications (including Dropbox and Apple iCloud) follow at 11%.
So What's the Risk?
Employees who deploy SaaS applications can put their organization at serious security risk of data loss, breaches, or attacks. Interestingly, approximately 40% of both IT and line-of-business respondents realize that sensitive corporate and personal data could be accessed or stolen by malicious actors or exposed to unauthorized users. About 15% of participants have either experienced or perceived a security incident-malware infection, data loss, unauthorized or blocked access-associated with using a particular SaaS application, as shown in this figure from the Frost & Sullivan survey:
From a broad perspective, the ComputerWeekly.com article outlines the four key risk of Shadow IT as:
Software Asset Management (SAM) Compliance
Governance and Standards
Lack of testing and change control
Configuration Management
Elastica, a Blue Coat Company, has published a report on Shadow Data which they define as all potentially risky data exposures lurking in cloud apps, due to lack of knowledge of the type of data being uploaded and how it is being shared. They report that of all the documents the average user stored in the cloud, 25% were broadly shared and of those, and 12.5% contained compliance-related data and source code.
Are your Mission-Critical Applications Protected?
Of course, this leads us to think about how the widespread use Shadow IT means that traditional forms of software protection, such as technology escrow, will often be bypassed when IT and procurement departments are not involved in SaaS subscriptions, and they are handled directly by employees.
Without the oversight of IT, certain protections aren't put into place, and this is particularly important for the mission-critical applications that have a significant impact on your business.
What would happen if the SaaS provider went out of business, was acquired, or failed to support your SaaS application? When an application was subscribed to by an employee acting on their own, you're out of luck. You face loss of productivity due to application downtime, loss of revenue, data loss, and potential brand damage.
On the other hand, when a mission-critical SaaS application is acquired through the IT department, a protection strategy such as SaaSProtect from Iron Mountain - a special form of technology escrow protection for SaaS applications and data - is often put into place. SaaSProtect ensures you will have access to your data and the application itself even if something were to happen to the software or the company hosting it. It gives you a
Most recent headlines
11/12/2025
Dalet, a leading provider of cloud-native, end-to-end media workflow solutions, ...
06/12/2025
In a live broadcast from the Reagan National Defense Forum, L3Harris Chair and CEO Christopher Kubasik joined Morgan Brennan on CNBCs Closing Bell: Overtime. Ku...
06/12/2025
FORT LAUDERDALE, Fla. A new survey from Pixitmedia by Datacore revealed a major shift in the Media & Entertainment industry in media archiving, with 85% of resp...
06/12/2025
HACKENSACK, N.J. LiveU has announced that the national public broadcaster Czech Television has completed one of the largest LiveU live production deployments fo...
06/12/2025
NEW YORK The National Academy of Television Arts and Sciences (NATAS) presented the Excellence in Production Technology Emmy Award to NASA+ and Dr. Tom Leight...
05/12/2025
2025 Sports Broadcasting Hall of Fame: Curt Gowdy Jr. - Master Storyteller, Nati...
05/12/2025
SVG Sit-Down: Veritone's Sean King on the Power of Mining Video, Audio DataThe company's Data Refinery offers users total control and governance over da...
05/12/2025
Platinum White Paper: Inside the Nashville Predators' Unified, Flexible, Sca...
05/12/2025
Netflix Reaches Agreement To Acquire Warner Bros. Following Planned WBD SplitThe deal does not include WBDs sports assets like TNT Sports (US, UK, LatAm), Euros...
05/12/2025
FOX Sports Returns to Indianapolis for Primetime Broadcast of Big Ten Championsh...
05/12/2025
SVG Summit 2025 Preview: Digital Engagement & Monetization Workshop Tackles the ...
05/12/2025
Atlanta United Lights Up New Emory Healthcare Studio With First Live Broadcast f...
05/12/2025
As Messi Takes the Pitch, MLS, Apple, NEP Roll Out Largest MLS Cup Production Ev...
05/12/2025
ESPN Enters College Football's Most Intense Month With Elevated Workflows fo...
05/12/2025
It's about that time! Awards season is in full swing, and the Film Independe...
05/12/2025
Every year, Spotify Wrapped offers a personalized look back at the audio that defined your year. It's a snapshot of your listening habits, designed to tell ...
05/12/2025
In 2025, Spotify's EQUAL, GLOW, and RADAR programs celebrated women, LGBTQIA , and emerging artists who turned moments into milestones. From breaking record...
05/12/2025
In our latest blog, we explain how Wi-Fi 7 rollouts can drive consumer loyalty with value-add services such as consumer cybersecurity. We also explore how this ...
05/12/2025
LOS ANGELES Netflix announced it has entered into an agreement to acquire the assets of Warner Bros. for $82.7 billion....
05/12/2025
NEW YORK Nielsens Gracenote has launched Gracenote Content Connect, a new ad platform that provides agencies, brands, supply-side platforms (SSPs) and demand-si...
05/12/2025
NEW YORK In an most important update to the workings of deal-based programmatic advertising, IAB Tech Lab has released version 1.0 of its Deals API for public c...
05/12/2025
NEW YORK Pass the turkey. Pass the stuffing. Pass the cranberry sauce. All are common requests of Americans celebrating Thanksgiving Day with family and f...
05/12/2025
NEW YORK Iris, the new cloud-connected camera control platform, has officially launched with features that turn virtually any PTZ camera into a software-connect...
05/12/2025
HOLLYWOOD, Calif. Netflix announced today that it has entered into an agreement to acquire the assets of Warner Bros. for $82.7 billion....
05/12/2025
NEW YORK Iris, the new cloud-connected camera control platform, has officially launched with features that turn virtually any PTZ camera into a software-connect...
05/12/2025
WASHINGTON The Federal Communications Commission has approved AT&T's $1.02 billion acquisition of spectrum from UScellular in a decision that was issued sho...
05/12/2025
The Best Coldplay Songs: 21 Tracks That Shoot for the Stars From Yellow to Viva La Vida, Fix You to Paradise, this playlist goes back to the start.
December ...
05/12/2025
Zafris Lecture Series Brings Nabil Ayers to Berklee The 32nd annual James G. Zafris Distinguished Lecture series was held on Thursday, November 13, with guest...
05/12/2025
Introducing New Perks to Help You Get Even More from LinkedIn Premium Published on Dec 5, 2025 Categories: Company News, Product News
LinkedIn Corporate Co...
05/12/2025
Friday 5 December 2025
A new Game of Thrones Tale: Official trailer for Sky Exc...
05/12/2025
Back to All News
Don Lee, Lee Jin-uk, and Lalisa Manobal to Star in Netflix Act...
05/12/2025
Tis the season of giving once again and this year we've taken our Give Back Fridays' concept and turned it on its head.
In the autumn we were approach...
05/12/2025
Brayden Gogis doesn't remember a time when he wasn't completely fixated on games in all forms. In preschool, when they asked us to dress up as what we ...
05/12/2025
The Grinch steals the spotlight as the theme for The Late Late Toy Show 2025
Tune in tonight at 9:35pm on RT One and worldwide on RT Player
#LateLateToyShow...
05/12/2025
RT Announces New Presenters of Flagship News Programmes
New RT Six One News co-presenter Tommy Meskill
Sarah McInerney & Justin McCarthy join Morning Ir...
04/12/2025
ToolsOnAir Blackmagic Design HyperDeck Event Presets for just:in mac pro 2025 & ...
04/12/2025
ToolsOnAir AJA Ki Pro Event Presets for just:in mac pro 2025 & just:in linux
More Details:Starting with version 5.5, both just:in mac pro and just:in linux sol...
04/12/2025
Wangu Kanuri from Kenya and Godwin Asediba from Ghana are two of this years finalists for Thomsons Young Journalist of the Year Award. The pair are runners-up i...
04/12/2025
SVG Sit-Down: ProximaVision's Claudio Lisman on Why Tethered Drones Could Be...
04/12/2025
SVG Campus Shot Callers: Imry Halevi, Senior Associate Director of Athletics, Co...
04/12/2025
Platinum White Paper: LiveU Lightweight Sports Production: A Step Change in Spor...
04/12/2025
London to Riyadh: DAZN brings the boxing glamour to new production levels for Be...
04/12/2025
Analysis: Paramount bets on the battering ram' with Champions League play By Callum McCarthy, Editor-at-Large
Tuesday, December 2, 2025 - 10:12
Print ...
04/12/2025
Space City Home Network Launches SCHN DTC App for Astros and RocketsThe Rockets and Astros were previously the lone NBA and MLB teams without a DTC appBy Jason...
04/12/2025
SVG Summit 2025 Preview: Content Workflows Workshop Spotlights Evolution of Spor...
04/12/2025
New Sponsor Spotlight: Geotech's Patrick Wambold On the Unreal Engine Revolu...
04/12/2025
Curt Gowdy Jr. - Master Storyteller, Nationally and RegionallyBy Jason Dachman, Editorial Director, U.S.
Thursday, December 4, 2025 - 1:52 pm
Print This Sto...
04/12/2025
(L-R) Rebecca Lichtenfeld, Mohammadreza Eyni, Sara Khaki, and Judith Helfand att...
04/12/2025
SBS launches Future Frames initiative to support emerging First Nations video ed...
The term Shadow IT refers to IT devices, software and services outside the ownership or control of IT organizations. And, although the terminology makes it sound kind of shadowy or illicit in nature, Shadow IT has grown out of necessity. With the advent of Software-as-a-Service (SaaS) applications and the increasing acceptance of Bring Your Own Device (BYOD) to the office, employees are looking to get their work done in ways that seem easiest and most effective to them.
