Companies left in the dark as two-thirds admit cloud apps being implemented without their knowledge

More than two-thirds (67 per cent) of organisations admit that unauthorised cloud applications are being implemented without IT’s knowledge or involvement, and correspondingly pose a security risk to the business. This is according to a snapshot poll by Centrify, the leader in unified identity management across cloud, mobile and data centre, at Cloud Expo Europe last week in London.

As Shadow IT becomes a bigger challenge for businesses – with employees downloading applications without going through a formal IT procurement process – around 40 per cent of respondents said that between 10-20 per cent of cloud services are now being purchased outside of IT. A fifth admitted that between 10-20 per cent of cloud applications are being implemented without any knowledge or involvement from IT, while half of respondents believed it was less than 10 per cent.


“It probably seems like an easy solution for people looking to cut corners and avoid having to go through the formal process of getting IT approval,” says Barry Scott, CTO EMEA at Centrify. “The problem is that so much cloud-based software is easily available and requires no IT skills whatsoever to manage, so staff are just downloading the tools they like or that will help in their work, without considering the risks.


“While half of our poll respondents were confident that less than 10 per cent of applications were being implemented without their knowledge, they are likely to be underestimating the extent of shadow IT in their organisation. Without the necessary controls and security policies in place, including passwords and authentication, unauthorised cloud apps are opening up corporate data to the risk of compromise,” adds Scott.


Visitors to the Centrify stand at Cloud Expo were also asked to estimate how much time they spend managing unauthorised cloud applications – 42 per cent said between 1-2 hours per week, while 21 per cent said between 2-5 hours per week.

Broadcom reveals new research on the state of sovereign cloud in Europe from Johan David Michels of...
Databricks announces new product natively integrated into the SAP Business Data Cloud.
Driven by Insight technology experts, the report offers a guide for organisations looking to drive...
Atos has won a new contract with Utmost Life and Pensions, a UK-based Life & Pensions provider, to...
EthosEnergy has successfully enhanced its data management and business continuity with the Nasuni...
Technology explores simplifying and securing hybrid multicloud connectivity at scale to deliver...
With Cubbit DS3, healthcare company ASL CN1 Cuneo protects its data with exceptional resilience...
‘Intelligent partner’ for SecOps and NetOps will allow teams to query network activity, drill...