Shadow IT
Software, tools, or services in use without formal approval or security review.
Learn it through a story
- The Tool Nobody Approved (Cybersecurity for Juniors 3, Ch 7)
Related terms
- Security mindset Applying these questions as a habit of thought across any role, not only security-titled jobs.
- Shadow AI People using AI tools at work that their organisation hasn't approved.
- Shadow API A live API version or endpoint nobody is actively tracking or securing.
- Shared responsibility model The idea, especially in cloud computing, that security is split between a provider and its customer, not owned entirely by either.
- Shelf reference A resource meant to be revisited repeatedly, not read once and shelved for good.
- Shoulder surfing Someone learning your password by watching or overhearing you, not by guessing it.