An IS auditor discovers that various departments within an organization have started using unauthorized cloud-based collaboration tools to manage their projects. Which of the following is the…

The correct answer is C. Compromised data security for the organization. The primary concern with the use of unauthorized cloud-based collaboration tools (shadow IT) is the potential compromise of data security. These tools may lack proper controls, oversight, and compliance with organizational security policies, increasing the risk of data leakage…

Submitted by renata2k· Apr 18, 2026Governance and Management of IT

Question

An IS auditor discovers that various departments within an organization have started using unauthorized cloud-based collaboration tools to manage their projects. Which of the following is the PRIMARY concern associated with this situation?

Options

AIncreased reliance on external vendors for IT services
BDifficulty integrating the unauthorized tools with existing systems
CCompromised data security for the organization
DDecreased communication among departments

How the community answered

(23 responses)

A
4% (1)
B
4% (1)
C
83% (19)
D
9% (2)

Explanation

The primary concern with the use of unauthorized cloud-based collaboration tools (shadow IT) is the potential compromise of data security. These tools may lack proper controls, oversight, and compliance with organizational security policies, increasing the risk of data leakage or unauthorized access to sensitive information.

Topics

#Shadow IT#IT Governance#Cloud security risks#Data security

Community Discussion

No community discussion yet for this question.

Full CISA Practice