What's your organization's approach to business units outside of IT using software to create new processes/capabilities (e.g., RPA, no-code, low-code development)?

Software Development

It's seen as shadow IT, and a risk to the organization18%

IT responds to requests for help on an ad-hoc basis50%

IT supports with governance21%

IT is accountable to enable and grow software development by the business as one of its key metrics9%

Other (comment below)

694 PARTICIPANTS
5.6k viewscircle icon3 Comments
Sort by:
VP of Technology2 years ago

We have AD Group Policy in place preventing software installations from occurring without the intervention of IT. So, any software installed without IT intervention would definitely be "shadow IT" in the sense that it wasn't approved and was used in opposition of Group Policy. 

However, IT is responsible for evaluating new software and providing feedback about its abilities to improve process efficiency and etc. If a software solution is requested and there is a clear business case for using it, IT should support and maintain it.

This is why I have answered the question as "IT supports with governance"

Director of IT in Education2 years ago

This could be a big issue for an organization, specifically, if the org is publicly traded. Without IT involvement/support (SDLC) there could be issues with security, intellectual information assets, and financial reporting (think SOX) if the software is a key part of the financial system or data used for financial statements.

Director in Manufacturing4 years ago

We have already seen support issues. A business employee develops and deploys. Then they leave the company and leave the process or application unsupported

IT is then blamed for lack of support

Unfortunately the support issues are usually more politically motivated to build domains.

Lightbulb on3

Content you might like

Do you think that using AI coding tools can cause developers to feel less engaged with their work? What are some signs that this could be happening for a team member?

How confident are you in your software team’s current expertise with AI-assisted coding?

Completely confident 18%

Moderately confident57%

Slightly confident25%

Not at all confident

View Results

With AI adoption accelerating across enterprises, what do you view as the top information security challenge that leaders should address? How can CISOs, VPs and Director’s align governance, risk and security investments to enable AI innovation without creating new exposures?

Read More Comments

As organizations deploy LLMs and other AI systems, how do you recommend security teams address risks such as data leakage, prompt injection and adversarial manipulation? What frameworks or practices should be prioritized to make AI security programs resilient from day one?

In the next 6 months, which will your company do?

Invest more in eCommerce33%

Maintain the current investment in eCommerce61%

Invest less in eCommerce5%

View Results