Shadow IT

Shadow IT refers to technology, software, or services used by employees or business units without formal approval from IT or security. Shadow IT vendors can exist outside the formal vendor inventory and third-party cyber risk management program, creating unmonitored exposure. Vendor discovery tools surface shadow IT relationships as part of a complete vendor inventory.