Focusing on transparency and training your humans in IT security are two effective ways of making sure that they understand the risk involved in using apps outside of your IT department’s knowledge.
Transparency from the top down will see them understanding why shadow IT poses such a risk, and help them to minimise that risk to your business. If there is a policy of transparency within your business, and an understanding that using shadow IT apps won’t result in a reprimand, your teams are more likely to come forward and provide details about the tools that they are using and why they need them, providing you with the opportunity to integrate them into your tech stack.
Training will provide your teams with insight into how they can protect your business by being careful about the apps that they use, checking the permissions that apps require, reading the fine print when it comes to accepting terms and conditions, and effectively managing their own updates.