Which term refers to hardware or software used on a private network without the owner's knowledge?

Which term refers to hardware or software used on a private network without the owner's knowledge?

• A. Shadow IT
• B. Unauthorized
• C. Hacker
• D. Internal threat

Answer: (A)

Shadow IT describes the practice of using hardware or software within an organization without the knowledge or approval of the owner or IT department. It happens when people bring in unsanctioned devices, install unapproved applications, or use cloud services without security oversight, effectively adding resources to a private network without being monitored. This hidden layer can create security gaps—like unpatched software, weak data protection, and untracked access—because it bypasses standard controls and monitoring. A hacker refers to a person who breaks into systems, which is not what’s described here. An internal threat is about risk from someone inside the organization who misuses authorized resources. Unauthorized is a generic descriptor, but the established term for this phenomenon is Shadow IT, which specifically captures the unapproved usage of technology on the private network.

Shadow IT describes the practice of using hardware or software within an organization without the knowledge or approval of the owner or IT department. It happens when people bring in unsanctioned devices, install unapproved applications, or use cloud services without security oversight, effectively adding resources to a private network without being monitored. This hidden layer can create security gaps—like unpatched software, weak data protection, and untracked access—because it bypasses standard controls and monitoring.

A hacker refers to a person who breaks into systems, which is not what’s described here. An internal threat is about risk from someone inside the organization who misuses authorized resources. Unauthorized is a generic descriptor, but the established term for this phenomenon is Shadow IT, which specifically captures the unapproved usage of technology on the private network.