Skip to content
Saturday, 17 October 2026Threat Detection & DefenceCyber SafetyIdentity & AccessCloud SecurityDevices & IoT
Wire
01Cisco Umbrella Explained: Cloud Security for Users On and Off the Network02Why Remote Monitoring and Management Belongs in an MSP's Security Strategy03CyberArk Study Finds 95% of APJ Organisations Hit by Identity Breaches04Metaverse Security: The Attacks Businesses Expect as They Move Into Virtual Worlds
GuideThreat Detection & DefenceIdentity & AccessCyber Safety

Shadow IT: September 2020 Special Focus

The September 2020 Special Focus guide covers shadow IT: devices, software and services run outside IT's control, the risks they bring, and how to regain control.

Cybersecurity ASEAN editors · 1 min read

The term shadow IT can sound ominous, yet the thing it describes is ordinary. The majority of organisations today have some of it, whether or not they are aware of it. It covers any IT devices, software or services that are bought and run without the knowledge or oversight of the IT department.

The trouble lies in that lack of oversight. Because shadow IT falls outside the IT function's remit, it usually departs from the organisation's official requirements on control, documentation, security, reliability and compliance. Each of those departures carries new business and security risks into the organisation as a whole.

Research has repeatedly found that organisations tend to underestimate both how much shadow IT they actually have and how much it is costing them.

The September 2020 Special Focus learning guide examines how businesses can bring their shadow IT practices into the open and take firmer control of them.