CISA · Question #350
Which of the following is the MOST likely root cause of shadow IT in an organization?
The correct answer is B. Lengthy approval for technology investment. Shadow IT-the use of unauthorized technology outside IT's oversight-most commonly originates from excessively long or bureaucratic approval processes for new tools. When business users have an urgent need and the formal IT approval cycle takes weeks or months, they bypass the…
Question
Which of the following is the MOST likely root cause of shadow IT in an organization?
Options
- AEase of use for cloud-based applications and services
- BLengthy approval for technology investment
- CThe opportunity to reduce software license fees
- DApproved software not meeting user requirements
How the community answered
(49 responses)- A8% (4)
- B73% (36)
- C14% (7)
- D4% (2)
Explanation
Shadow IT-the use of unauthorized technology outside IT's oversight-most commonly originates from excessively long or bureaucratic approval processes for new tools. When business users have an urgent need and the formal IT approval cycle takes weeks or months, they bypass the process and procure their own solutions. While unsatisfactory approved software (D) can also drive shadow IT, a lengthy approval process (B) is the more pervasive root cause because it creates the systemic frustration that pushes users toward workarounds regardless of what's available.
Topics
Community Discussion
No community discussion yet for this question.