COMPLYZARD
Try 1 month free

Shadow IT security guidance

Document preview6 pages
Download
Cover of Shadow IT security guidance
Page 1 of 6

Download this document free

Get this document with your free trial. Choose from the full Complyzard library.

Try 1 month free30 days free, then $19/month. Trial terms apply. Card required. Cancel anytime.
Document information
ByNational Cyber Security Centrecobalt_lark_9eba5d

Managing 'unknown assets' that are used within an organisation.

Adapted edition

Asset management
Document type
Reference Guide
Format
DOCX
Pages
6
Language
English
Version
1.0
Updated
2026-09-16
Category
Information security
Licence
Open Government Licence v3.0
Description

Managing 'unknown assets' that are used within an organisation for organisational planning, review and training. NCSC guidance is advisory and should be applied to the organisation's own risks and obligations.

Contents
  • What is shadow IT?
  • Shadow IT is not BYOD
  • What can you learn from shadow IT?
  • Types of shadow IT
  • Unmanaged devices
  • Unmanaged services
  • Threats posed by shadow IT
  • Data theft
  • Exploitation of services or devices
  • Mitigations for shadow IT
  • Organisational mitigations
  • Help with addressing specific user needs
  • Technical mitigations
  • Source links
Source and licence
Shadow IT

National Cyber Security Centre

Original source OGL-UK-3.0

AttributionNational Cyber Security Centre, “Shadow IT” (27 July 2023), reused under the Open Government Licence v3.0.

ChangesAdapted 16 September 2026: converted the official HTML article into neutral text-only DOCX and PDF editions. Preserved article headings, paragraphs, lists and plain-text source-link destinations; normalized web whitespace and typographic punctuation; omitted site navigation, topic and download cards, images, logos, scripts, styles and page furniture.

Version history
  • v1.016/09/2026
Report this document