Which of the following is the MOST significant risk related to shadow IT?

The correct answer is D. Necessary controls may not be in place. The most significant risk related to shadow IT is the lack of necessary controls, as the use of unauthorized IT resources can bypass security measures, compliance policies, and data protection controls, potentially leading to vulnerabilities and increased exposure to risks.

Submitted by devops_kid· Apr 18, 2026Governance and Management of IT

Question

Options

AInappropriate utilization may hinder IT's ability to provide support
BUse a shadow IT over time may cause production slowdowns
CSoftware or hardware may be unnecessarily duplicated
DNecessary controls may not be in place

How the community answered

(45 responses)

A
7% (3)
B
31% (14)
C
16% (7)
D
47% (21)

Explanation

The most significant risk related to shadow IT is the lack of necessary controls, as the use of unauthorized IT resources can bypass security measures, compliance policies, and data protection controls, potentially leading to vulnerabilities and increased exposure to risks.

Topics

#Shadow IT#IT Governance#Risk Management#Internal Controls

Community Discussion

No community discussion yet for this question.

Full CISA Practice