Shadow IT has become a relatively unavoidable component of the way in which companies do business. While there are ways to limit its impact, many organizations are finding greater benefit in providing their employees with guidelines and user education instead. That said, many significant concerns must be addressed before giving the metaphorical thumbs-up to shadow IT solutions.

What types of activities should not be part of a shadow initiative due to security concerns? Who should authorize and approve the overall strategy and activities?