Shadow IT
A phenomenon in which employees or departments within an organization use unapproved software, devices, or cloud services without the knowledge or authorization of the IT department. It is a classic risk concept in the fields of enterprise information security and IT governance.
Core Facts
Shadow IT refers to the practice of employees or departments bypassing corporate IT controls to privately use unapproved software, devices, or cloud services
The concept of "shadow AI" is borrowed from "shadow IT" and refers to employees independently procuring or using AI software tools without formal approval from the IT department.
Timeline (last 90 days)
Compared with traditional shadow IT, shadow AI has a lower threshold and spreads faster: employees do not need to install software or request resources, and only need to paste a piece of text into a web page to complete a potential data leak.
AI agents can delete records, send emails, and call payment interfaces, whereas the systems of the shadow IT era would not proactively perform operations on their own.
AI tools are especially prone to fostering shadow IT due to their ease of use and low barrier to entry (typically requiring only account registration and a linked credit card), introducing data security and compliance risks.
Shadow IT refers to the practice of employees or departments bypassing corporate IT controls to privately use unapproved software, devices, or cloud services
The Shadow AI phenomenon is similar to the Shadow IT of earlier years, but AI tools have a lower barrier to adoption, spread faster, and are harder to detect.
The concept of "shadow AI" is borrowed from "shadow IT" and refers to employees independently procuring or using AI software tools without formal approval from the IT department.
All Facts (6)
Shadow IT refers to the practice of employees or departments bypassing corporate IT controls to privately use unapproved software, devices, or cloud services
75%VerifiedThe concept of "shadow AI" is borrowed from "shadow IT" and refers to employees independently procuring or using AI software tools without formal approval from the IT department.
75%UnverifiedCompared with traditional shadow IT, shadow AI has a lower threshold and spreads faster: employees do not need to install software or request resources, and only need to paste a piece of text into a web page to complete a potential data leak.
50%UnverifiedAI agents can delete records, send emails, and call payment interfaces, whereas the systems of the shadow IT era would not proactively perform operations on their own.
50%UnverifiedAI tools are especially prone to fostering shadow IT due to their ease of use and low barrier to entry (typically requiring only account registration and a linked credit card), introducing data security and compliance risks.
50%UnverifiedThe Shadow AI phenomenon is similar to the Shadow IT of earlier years, but AI tools have a lower barrier to adoption, spread faster, and are harder to detect.
50%