This document discusses the issue of "shadow IT" within organizations and provides potential solutions. Shadow IT refers to IT systems and services used within a company that are not formally approved by the central IT department. The document notes that shadow IT arises due to people, processes, technology, culture, and organizational factors. It suggests some common forms of shadow IT include cloud services, data transfer tools, collaboration platforms, marketing services, video streaming, wireless networks, BYOD policies, and email/social media use. To address shadow IT, the document proposes solutions such as fixing core IT issues, communicating with different departments, creating amnesty programs, standardizing common services, and adopting a "bring your own security" model.

1. 2014
Shadow IT
…What Lurks
inside…
Richard Rushing
CISO Motorola Mobility
rrushing@motorola.com
Twitter: @secrich
LinkedIN: Richard Rushing

2. • Why Do we Live in the Shadows
– People
– Process
– Technology
– Culture
– Organization

3. Typical Change for IT – Not in our DNA
Desired End State Current State Developed End State

4. • What is you Percentage of SHADOW IT?
• What is the IT Organization Percentage of Happy or Satisfied ?
• What is the number of Project you delivered Late or Over budget?
• You know the percentage now 

5. Mondays suck………….the rest of the week does too!
• World is a dangerous place.

6. If we do not ChangeWe will Fail
Threats have grown to a level where we can not win

7. Who’s Shadow is cast in your Organization
– Marketing
– Sales
– Software Development (Non-IT)
– HR
– Legal
– Facilities

8. Common Shadows
• Cloud Services – Amazon, Google, etc..
• DataTransfer – DropBox, Box
• Collaboration – GotoMeeting,Webex
• Marketing – Everything PR, Ad, Agency
• Video Streaming -YouTube
• Wireless Networks –Yours does not work well
• BYOD – Phones,Tablets, Computers
• Email – Business over Personal
• Social Media – Facebook, Google+

9. Solutions
Fix the IT Issues / Outreach Program
Talk to the Levels below –Where the Action is
Amnesty Program –Take over Systems
Create Common Programs forCommon Issues

10. All Solutions should have BOS – Bring your own Security
Can not Beat them Join them
DataTransfer – DropBox, Box, etc – Have Enterprise Additions
Cloud – Create Enterprise Managed Instances (Amazon, Google, etc)
Video Streaming – Ask reasons for the “Out Source”
Collaboration – Standardize, use the shadows to help test
BYOD – It’s a Policy Issue, Give the user choices you find you solve 95 percent
Wireless – Fix it and monitor ofAccess Points