E108 - Shadow IT

In this episode, Brian and Milou explore the concept of shadow IT, its implications for organizations, and practical strategies to manage and mitigate its risks. They discuss how shadow IT arises, the security and compliance challenges it presents, and how to establish effective policies and controls.

Chapters
00:00 Introduction to Shadow IT and Episode Overview
01:56 What is Shadow IT and Why Is It a Problem?
03:14 Emerging Shadow IT Vectors: AI and Browser Extensions
07:09 Risks of Shadow IT: Data Exposure and Security Threats
10:44 Compliance and Asset Management Risks of Shadow IT
15:08 How to Identify and Control Shadow IT
16:41 Enforcing Policies and Making Approval Processes Easy
18:15 Monitoring and Technical Controls to Manage Shadow IT
20:24 Summary and Final Recommendations