Shadow IT Awareness

What Is Shadow IT Awareness?

A 127MB client delivery, a 50MB limit on the approved tool, and a colleague who swears by a free file-sharing site. The upload takes seconds. A week later the site announces a breach, and your client's files are in the leaked data. In this exercise you follow that shortcut to its end: you come forward to IT Security, file the incident report, and submit a software request, which turns up an approved tool that was available all along.

What You'll Learn in Shadow IT Awareness

• Define shadow IT and recognize common examples, such as free file-sharing sites, unapproved apps, and browser extensions used for work
• Evaluate the security risks of uploading company data to unvetted third-party services, including data residency and compliance exposure
• Follow the proper process when a tool falls short: report any exposure to IT Security and submit a software request for an approved alternative
• Understand how shadow IT creates security blind spots that prevent your organization from monitoring, patching, or revoking access to sensitive data
• Identify the difference between convenient workarounds and genuine security risks when team members suggest new tools under time pressure

Shadow IT Awareness — Training Steps

1. A Tight Deadline

   Your team has finalized the design files for the Hawthorne project, but there's a problem - the files total 127MB, and the file-sharing platform your team normally uses only handles up to 50MB. The client is already asking for the files.

2. A Message from Marcus

   Alice's phone buzzes with a Telegram notification from her colleague Marcus Chen.

3. Getting the Link

   CloudDrop sounds like it would solve Alice's problem immediately. The deadline is pressing and she needs a solution fast.

4. Opening CloudDrop

   Alice opens CloudDrop on her desktop browser. The site looks professional and straightforward - a clean interface promising fast, free file sharing.

5. Selecting Files to Upload

   Alice clicks the Upload Files button. A file browser opens so she can select the Hawthorne deliverables from her documents folder.

6. Uploading the Hawthorne Deliverables

   The file manager opens, showing Alice's files. She needs to navigate to the documents folder and select the Hawthorne deliverables zip file - 127MB of design files, project timelines, and documents containing client contact information.

7. Sharing the Link with the Client

   The upload is complete and CloudDrop has generated a shareable link. Alice switches to her email to send the download link to Sarah at Hawthorne Industries.

8. A Disturbing Email

   A week has passed. Alice starts her morning to find an unexpected email from CloudDrop.

9. Security Incident Alert

   Before Alice can fully process the CloudDrop breach notification, another email arrives - this one from Pinnacle's own Security Operations Center.

10. Calling IT Security

    Alice's heart sinks. The Hawthorne project files she uploaded to CloudDrop last week are part of the breach. She needs to call IT Security immediately and come forward.