Which type of SaaS application offers no business benefits and creates risk for an organization?

The correct answer is C. Unsanctioned. Unsanctioned SaaS applications (also called shadow IT) are cloud apps used by employees without IT or security approval. They offer no recognized business benefit and introduce risk because they bypass corporate security controls, data governance policies, and compliance…

Submitted by mateo_ar· Apr 18, 2026Cloud Security

Question

Options

ATolerated
BSanctioned
CUnsanctioned
DProhibited

How the community answered

(22 responses)

B
5% (1)
C
86% (19)
D
9% (2)

Explanation

Unsanctioned SaaS applications (also called shadow IT) are cloud apps used by employees without IT or security approval. They offer no recognized business benefit and introduce risk because they bypass corporate security controls, data governance policies, and compliance requirements. Sanctioned apps are approved by IT, tolerated apps have limited acceptance, and 'prohibited' is not a standard SaaS classification in this framework.

Topics

#SaaS security#Shadow IT#Cloud risk management#Application governance

Community Discussion

No community discussion yet for this question.

Full PCCET Practice