Web tool against shadow IT
The term "shadow IT" describes information technology processes that are set up in an IT infrastructure without the knowledge of the IT department. German scientists have now developed an application to help SMEs in particular assess such security risks.
A new, freely accessible web tool will help companies deal with shadow IT in the future. In the "Legitimise IT" research project, scientists at the International Performance Research Institute (IPRI) and by the Research Institute for Rationalization (FIR) at the RWTH Aachen developed a procedure that specifically supports SMEs in dealing with shadow IT.
Solutions included
According to IPRI, the web tool is aimed at decision-makers from the central IT area. It is useful for identifying shadow IT and provides a self-assessment for a risk and benefit analysis of identified applications. This characterizes and evaluates shadow IT applications according to specific criteria. Based on the analysis, solutions are proposed. According to IPRI, shadow IT harbors both risks and potential benefits for companies.
Shadow IT refers to software and hardware developed or used by specialist departments in companies outside the visibility, control or management of the central IT department. Such solutions are often established and sometimes process-critical components in companies. According to IPRI, the risks posed by the use of shadow IT are often underestimated by companies. Strict prohibition or prevention is not very effective, however. In order to remain competitive, it is particularly important for SMEs to deal with shadow IT in a controlled manner and to take advantage of the associated opportunities.
The web tool is available as of now at the following link for free disposal.
