This is a CISO's nightmare fuel. Shadow IT is a real pain, consisting of systems with no ownership, no control, and possibly a tight link with the inner IT system.
And the majority of this is only exacerbated by the complexity of the decision-making process.
And the majority of this is only exacerbated by the complexity of the decision-making process.