November 6, 2017 By Mark Samuels 2 min read

The specter of shadow IT continues to cast shade over enterprise technology operations, and chief information officers (CIOs) are in denial about the scale of the problem.

That is the key conclusion drawn from Symantec’s “1H 2017 Shadow Data Report,” which analyzed the main challenges organizations face when attempting to ensure that data held in cloud apps and services remains secure and compliant.

The survey, which evaluated more than 22,000 cloud apps and services, 465 million documents and over 2.3 billion emails, demonstrated how IT decision-makers must keep a watchful eye over the applications their employees use.

Understanding the Threat of Shadow IT

In a blog post, Symantec executive Deena Thomchick said that organizations use more cloud apps than most IT professionals would expect. The average business now uses 1,232 cloud apps, which is roughly one-third more than they did as of the second half of 2016.

Despite this number, the average CIO believes that his or her business uses between 30 and 40 cloud apps. These figures highlight how shadow IT poses a growing risk to the technology department’s ability to prevent data loss.

The survey also found that businesses “broadly shared” 20 percent of all files held in cloud-based file sharing apps and almost one-third (29 percent) of emails stored in on-demand email platforms. Symantec defined a “broadly shared” file as one that is distributed to the whole organization, an outside third party or publicly to any individual who holds a link to the file.

The Dangers of Sharing Sensitive Information

There is some good news, however. Thomchick reported that it was common in the past to find that 10 percent or more of these broadly shared files contained sensitive data. She suggested that security-conscious organizations are doing better today, since just 2 percent of shared files included confidential information.

While the reduction in the proportion of files containing sensitive data is encouraging, it is concerning that the data being shared includes details relating to compliance, such as personally identifiable information (PII), payment card data and protected health records. Of the 29 percent of broadly shared email assets stored in the cloud, 9 percent included compliance-related data. In total, according to SecurityWeek, Symantec found 207 million emails that it considered at risk.

Implementing Measures to Curtail Shadow IT

SecurityWeek noted that the survey results are based on companies using Symantec’s CloudSOC products. These businesses are therefore already striving to keep cloud data safe. Figures for firms not taking a proactive approach could be worse.

With the constant introduction of new productivity and communication tools, users are more inclined to collaborate outside of IT-sanctioned applications. IT organizations must evaluate existing solutions for their adherence to enterprise standards and either embrace them or replace them with viable alternatives.

When it comes to reducing the risk posed by shadow IT, Thomchick advised companies to implement a range of information security measures and implored executives to share threat intelligence across business platforms. She also pointed to the importance of other techniques, such as auditing, real-time detection, data loss protection and post-incident analysis.

More from

What is the Open-Source Software Security Initiative (OS3I)?

3 min read - The Open-Source Software Security Initiative (OS3I) recently released Securing the Open-Source Software Ecosystem report, which details the members’ current priorities and recommended cybersecurity solutions. The accompanying fact sheet also provides the highlights of the report. The OS3I includes both federal departments and agencies working together to deliver policy solutions to secure and defend the ecosystem. The new initiative is part of the overall National Cybersecurity Strategy.After the Log4Shell vulnerability in 2021, the Biden-Harris administration committed to improving the security of…

Widespread exploitation of recently disclosed Ivanti vulnerabilities

6 min read - IBM X-Force has assisted several organizations in responding to successful compromises involving the Ivanti appliance vulnerabilities disclosed in January 2024. Analysis of these incidents has identified several Ivanti file modifications that align with current public reporting. Additionally, IBM researchers have observed specific attack techniques involving the theft of authentication token data not readily noted in current public sources. The blog details the results of this research to assist organizations in protecting against these threats. Key Findings: IBM research teams have…

X-Force Threat Intelligence Index 2024 reveals stolen credentials as top risk, with AI attacks on the horizon

4 min read - Every year, IBM X-Force analysts assess the data collected across all our security disciplines to create the IBM X-Force Threat Intelligence Index, our annual report that plots changes in the cyber threat landscape to reveal trends and help clients proactively put security measures in place. Among the many noteworthy findings in the 2024 edition of the X-Force report, three major trends stand out that we’re advising security professionals and CISOs to observe: A sharp increase in abuse of valid accounts…

Topic updates

Get email updates and stay ahead of the latest threats to the security landscape, thought leadership and research.
Subscribe today