Have you ever seen that get reigned back in? When we let everybody go off and work collaboratively... I think once the genie's out, it's not coming back in.
Yes and no. In the two examples that I can think of, where it is a very collaborative environment, it's a conscious decision by all the parties involved. But in both cases, they have a governance model that says when it gets to a certain point, that does come back into IT. But at that point, IT is engaged and aware and involved in it. People are welcoming IT to be involved in the process rather than doing it out of a source of necessity.
I think that's a proper governance model. If you can cross this threshold, we'll have a conversation where I guess the risks will help you negotiate a better contract or whatever.
An effective way to limit shadow IT is to let staff know that any software purchased or cloud service used without approval from the IT & security departments will not be reimbursed.
I disagree. We have to look beyond going to a command and control paradigm. That's often why departments are looking elsewhere. We need to understand why they are and find ways to collaborate and engage them in a productive way. This isn't a competition, IT and the department are part of the same company.
Shadow IT is not something that should be feared. It should be something that is supported...in the right way. If it is being used to go around IT, don't punish those doing it, look inside to understand the reasons why...and how to change it.
Content you might like
organized a virtual escape room via https://www.puzzlebreak.us/ - even though his team lost it was a fun subtitue for just a "virtual happy hour"
Production45%
Backup64%
Replication34%
Non-production DBs (Dev, Training, QA, etc.)31%
Quarterly14%
Twice per year45%
Annually32%
Every 3 years7%
Every 5 years1%
Other (please share below)1%
Yeah. I think too many people see shadow IT and they immediately say we've got to control that rather than stepping back and saying, "Okay, why is it happening?"
It’s about understanding context over a control. You're never going to play whack-a-mole on shadow IT or shadow cloud.