Learn in the textbookThe Fraud Triangle and Human Vulnerabilities
DefinitionShadow IT (シャドーIT) refers to devices or services that employees use for work without the organization's approval or control.
ExplanationExamples include editing internal documents on a personal laptop that was never registered, or talking with customers through a chat tool the company has not approved. Because the organization cannot track what information is where, it tends to be slow to notice data leaks or virus infections.
AnalogyIt is like secretly making a spare house key without telling your family and leaving it somewhere. It is handy for you, but whoever looks after the house knows neither how many keys exist nor where they are.
Memory hookShadow means the dark corners a manager's eye cannot reach: IT used out of sight of the department in charge.