Shadow IT is best described as

Shadow IT is best described as

• A. IT offerings Not Provided By/Sanctioned by Business
• B. IT services provided by the IT department only
• C. IT services with formal governance
• D. Shadow IT is a training program

Answer: (A)

Shadow IT is about technology tools and services that people within an organization use without formal approval from the business or IT department. It often includes unsanctioned cloud apps, personal devices, or software purchased outside official channels, slipping past governance and security controls. Because it operates outside approved processes, it can create security, compliance, and data-risk issues. The phrase that describes IT offerings not provided by or sanctioned by the business matches this idea exactly. In contrast, services provided by the IT department, services with formal governance, or a training program all involve some level of official oversight or purpose beyond unapproved usage.