thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Security Operations · Foundational

Shadow IT

Hardware, software or cloud services used inside an organization without the approval or knowledge of IT and security.

Definition

Shadow IT is considered an unintentional insider threat because it creates unmanaged assets that are not patched, monitored or covered by policy. Common examples are unsanctioned SaaS apps, personal file-sharing services and rogue wireless access points. Cloud access security brokers and network discovery help find it.

Example

A marketing team storing customer lists in an unapproved online spreadsheet service is shadow IT.

Exam tip

Security+ lists shadow IT as a threat actor type; its motivation is usually convenience, not malice.

Related terms