What is Shadow IT?
Also known as: shadow AI
Shadow IT is software, cloud services and AI tools employees use for work without IT's knowledge or approval: a personal Google Drive, an unknown file converter, client data pasted into ChatGPT.
Shadow IT usually comes from good intentions: people want to get the job done faster. But the data leaves the company's control, and after a leak nobody knows where it went.
How to spot it
- Work files in personal accounts
- Client data in a public AI chat
What to do
- Use the tools your company approves
- Don't paste personal or confidential data into AI tools
Related courses
- AI & privacyHow information leaks into AI tools, shadow AI and the rules of safe prompting.
- Managing sensitive informationThe CIA triad, the two-channel sharing principle, shadow IT and a scenario with an external auditor.
- Safe cloud sharingAccess levels and permissions in Google Drive and OneDrive, and what a hasty "anyone with the link" share costs.
Terms on this topic
More topics
Start with your team's risk baseline
15-30 employees, one phishing simulation and a one-page report for management. No annual commitment.