What is the best strategy for managing shadow IT in a large corporate environment?

All answers to this question.

Lockdowns almost always backfire because employees will just find more creative ways to bypass IT to get their work done. A better strategy is "Visibility and Enablement." Use a Cloud Access Security Broker (CASB) to see what apps are actually being used. Once you have a list, ask those departments why they chose those tools over the official IT offerings. Often, it's because the IT process is too slow. By creating a "Sanctioned App Store" where users can request and get quick approval for new tools, you turn IT from a "No" department into a partner that ensures the tools they want are secure and cost-effective.

   Answered 2025-03-22 by Brenda Young

Are you more concerned about the security vulnerabilities of these unmanaged apps, or is the primary issue the redundant spending and "app sprawl" occurring in your budget?

   Answered 2025-03-25 by Kenneth Brown

• Kenneth, it's really both. We had a minor data leak last month because of an unmanaged Trello board, but the CFO is also breathing down my neck about the $50k in mystery software charges he found on corporate cards. I think Brenda's "Sanctioned App" idea is the way to go. If I can negotiate enterprise rates for the tools they actually want, I can solve the budget problem and the security problem at the same time. I'll start by surveying the heavy-users of these rogue apps to understand their requirements.

     Commented 2025-03-28 by Anthony White

Treat Shadow IT as a "feature request." If people are using a specific tool, it means your current IT service catalog is missing something they need to be productive.

   Answered 2025-04-01 by Karen Scott

• I love that perspective, Karen. Shadow IT is basically a free market research report on what your employees actually want from their technology.

     Commented 2025-04-03 by Susan Wright