Which term describes computer hardware, software, or services used on a private network without authorization from the system owner?

Which term describes computer hardware, software, or services used on a private network without authorization from the system owner?

• A. Shadow IT
• B. Internal threat
• C. Unauthorized
• D. Hacker

Answer: (A)

Shadow IT is the practice of using computer hardware, software, or services on a private network without approval from the system owner. It happens when people try to satisfy a need quickly or privately, bypassing formal IT governance. This term best fits because it captures both the unsanctioned nature and the variety of tech being used within the organization, which can create security gaps, make it hard to enforce policies, and complicate compliance. For example, an employee might install a personal file-sharing app on a company computer or subscribe to a cloud service without IT being aware. The other options don’t describe this situation: an internal threat refers to a risk source from inside the organization, not the act of using unapproved tech; unauthorized is too generic and doesn’t name the specific phenomenon; a hacker is a person who breaches systems, not the practice of using unapproved tech resources.

Shadow IT is the practice of using computer hardware, software, or services on a private network without approval from the system owner. It happens when people try to satisfy a need quickly or privately, bypassing formal IT governance. This term best fits because it captures both the unsanctioned nature and the variety of tech being used within the organization, which can create security gaps, make it hard to enforce policies, and complicate compliance. For example, an employee might install a personal file-sharing app on a company computer or subscribe to a cloud service without IT being aware. The other options don’t describe this situation: an internal threat refers to a risk source from inside the organization, not the act of using unapproved tech; unauthorized is too generic and doesn’t name the specific phenomenon; a hacker is a person who breaches systems, not the practice of using unapproved tech resources.