The term “Shadow IT” refers to the practice of employees within an organization using hardware, software, or cloud services without the permission of the company’s IT team. This may occur due to an employee’s perception of IT  as being too restrictive, or because employees don’t understand the implications of using solutions that aren’t monitored or screened by IT. Shadow IT is quite risky for organizations, as it means that apps which haven’t been approved by a knowledgeable, in-house expert may have been unknowingly granted access and permissions to sensitive data within your organization.  Proactively taking steps to make sure that Shadow IT doesn’t become the norm in your organization should be a major part of your company’s SaaS security strategy.