skip to main content
Travelers Logo
  • About
  • Careers
  • Agents
  • Investors
  • Sustainability
  • Contact Us
  • For Individuals
    • Overview
    • Products
      • Car
      • Home
      • Renters
      • Condo
      • Landlord
      • Boat & Yacht
      • Flood
      • Motorcycle
      • Travel
      • Pet
      • Weddings
      • Umbrella
      • All Products
    • Prepare & Prevent
      • Insurance 101
      • Home Central
      • Travelers Garage
      • Managing Through COVID-19
    • Affinity Group Discount
    • Online Service
    • Pay Your Bill
      • Get a Quote
      • Find an Agent
      • Report a Claim
      • Pay Your Bill
  • For Business
    • Overview
    • Products & Solutions
      • Overview
      • Boiler & Machinery
      • Commercial Auto & Trucking
      • Cyber
      • Environmental Liability
      • Excess Casualty & Umbrella
      • General Liability
      • Global Insurance
      • Inland Marine
      • Management & Professional Liability
      • Ocean Marine
      • Property
      • Business Owner's Policy
      • Surety Bonds
      • Workers Compensation
        • Find an Agent
        • Report a Claim
        • Pay Your Bill
    • Industries
      • Overview
      • Agribusiness
      • Architects, Engineers & Surveyors
      • Auto & Truck Dealers
      • Business & Professional Services
      • Construction
      • Education
      • Energy & Renewable
      • Equipment Dealers
      • Financial Institutions
      • Food Services
      • Health & Related Services
      • Hospitality & Recreation
      • Manufacturing
      • Marine Industries
      • Museums & Fine Art
      • Non-Profit
      • Oil & Gas
      • Public Entities
      • Real Estate
      • Retail
      • Technology
      • Transportation
      • Wholesale & Distribution
        • Find an Agent
        • Report a Claim
        • Pay Your Bill
    • Services
      • Overview
      • Risk Control
      • Claim
      • Premium Audit
      • Online Customer Tools
      • Risk Management Information Services
      • Travelers Client Advantage
        • Find an Agent
        • Report a Claim
        • Pay Your Bill
    • Small Business
      • Overview
      • Automobile Insurance
      • Business Owner's Policy
      • Data Breach
      • Employment Practices Liability
      • Professional Insurance
      • Umbrella Insurance
      • Workers Compensation Inurance
        • Find an Agent
        • Report a Claim
        • Pay Your Bill
    • Large Business
      • Overview
      • Casualty
      • Cyber
      • Management & Professional Liability
      • Property
        • Find an Agent
        • Report a Claim
        • Pay Your Bill
    • Multinational Business
    • Prepare & Prevent
      • By Topic
      • By Industry
      • Navigating Your Business Through COVID-19
        • Find an Agent
        • Report a Claim
        • Pay Your Bill
      • Find an Agent
      • Report a Claim
      • Pay Your Bill
  • Claim Center
    • Claim Center
    • Should I File a Claim?
    • File a Claim
    • Roadside Assistance
    • Find a Service Provider
    • Check Your Claim Status
    • Manage Your Claim Experience
      • Understanding the Claim Process
      • Claim Guide Library
      • Workers Compensation Resources
    • Claim Capabilities
      • Get a Quote
      • Find an Agent
      • Report a Claim
      • Pay Your Bill
  • Prepare & Prevent
    • For Individuals
    • Home Central
      • Buying & Selling
      • Home Maintenance
      • Home Renovation
      • Home Safety
      • Moving
      • Smart Home
    • Travelers Garage
      • Buying & Selling
      • Car Maintenance
      • Distracted Driving
      • Safe Driving
      • Teen Driving
      • Boating
    • Insurance 101
    • Weather
    • For Business
    • Industries
      • Construction
      • Manufacturing
      • Nonprofit
      • Small Business
      • Technology
    • Topics
      • Business Continuity
      • Cyber
      • Driver and Fleet Safety
      • Facilities Management
      • Internet of Things
      • Product and Services Liability
      • Supply Chain Management
      • Workplace Safety
    • Travelers Risk Index
      • Get a Quote
      • Find an Agent
      • Report a Claim
      • Pay Your Bill
  • About Travelers
    • Overview
      • Awards & Recognition
      • Careers
      • Community
      • Diversity & Inclusion
      • Sustainability
      • History
      • Investors
      • Media Resources
      • News
      • Travelers Championship
      • Travelers Institute
      • Get a Quote
      • Find an Agent
      • Report a Claim
      • Pay Your Bill
    • Get a Quote
    • Find an Agent
    • Report a Claim
    • Pay Your Bill
Main Navigation
  • For Individuals
      • Insurance for Individuals
      • Products
        • Car
        • Home
        • Renters
        • Condo
        • Landlord
        • Boat & Yacht
        • Flood
        • Motorcycle
        • Travel
        • Pet
        • Weddings & Events
        • Umbrella
        • More
      • Prepare & Prevent
        • Insurance 101
        • Home Central
        • Travelers Garage
      • Affinity Group Discount
      • Online Service
      • Pay Your Bill
    • Get a home quote now

      It's easy to get a free quote for home insurance from Travelers in just a few minutes.

       

      Get a home quote now
  • For Business
      • Products & Solutions
        • Commercial Auto & Trucking
        • Cyber
        • General Liability
        • Management & Professional Liability
        • Property
        • Business Owner's Policy
        • Surety Bonds
        • Workers Compensation
        • More
      • Industries
        • Construction
        • Energy & Renewable
        • Financial Institutions
        • Healthcare
        • Manufacturing
        • Real Estate
        • Technology
        • Transportation
        • More
      • Prepare & Prevent
      • Services
        • Risk Control
        • Claim
        • Premium Audit
        • More
      • Pay Your Bill
      • Small Business
      • Large Business
      • Multinational Business
      • For Business Overview
    • Tips for Managing Risks Related to a Remote Workforce

      Tips for Managing Risks Related to a Remote Workforce

      With the current reality of more employees working from home through the pandemic, is your business ready for all the implications?

      Learn more
  • Claim Center
      • Claim Center
      • Should I File a Claim?
      • File a Claim
      • Roadside Assistance
      • Find a Service Provider
      • Check Your Claim Status
      • Manage Your Claim Experience
        • Understanding the Claim Process
        • Claim Guide Library
        • Workers Compensation Resources
      • Claim Capabilities
    • Send us your receipts, photos, invoices and more with just a push of a button.

      Securely share information with your Claim team.

      Send us your receipts, photos, invoices and more with just a push of a button.

      Upload a File
  • Prepare & Prevent
      • For Individuals
      • Home Central
        • Buying & Selling
        • Home Maintenance
        • Home Renovation
        • Home Safety
        • Moving
        • Smart Home
      • Travelers Garage
        • Buying & Selling
        • Car Maintenance
        • Distracted Driving
        • Safe Driving
        • Teen Driving
        • Boating
      • Insurance 101
      • Weather
      • For Business
      • Industries
        • Construction
        • Energy
        • Manufacturing
        • Nonprofit
        • Small Business
        • Technology
      • Topics
        • Business Continuity
        • Cyber
        • Driver and Fleet Safety
        • Facilities Management
        • Internet of Things
        • Product and Services Liability
        • Supply Chain Management
        • Workplace Safety
      • Travelers Risk Index
    • Managing Through COVID-19

      Managing Through COVID-19

      Resources to help you adapt to the realities of COVID-19.

      Learn more
  • Home
  • Prepare & Prevent
  • Business
  • Industries
  • Technology
  • 5 Shadow IT Practices That Put Technology Companies at Risk

5 Shadow IT Practices That Put Technology Companies at Risk

Shadow IT practice of using a USB on a laptop Shadow IT practice of using a USB on a laptop

What is Shadow IT?

Shadow IT consists of projects conducted out of compliance with official company policies and without oversight from the company’s corporate IT function.

Unlike ransomware, spear phishing and other technology threats that largely attack from outside company walls, the risks of Shadow IT often start from within. Employees who conduct technology projects on a “Shadow” basis – outside official company policies and without company IT oversight – may be putting their company’s intellectual property and sensitive data at risk.

The practice of circumventing official IT channels can leave a virtual door open to hackers and cyber thieves, who see Shadow IT as a favorite playground for launching an attack. Cloud services and personal devices can lack adequate security measures and employees with non-technical backgrounds may not know how to properly protect data.

Business leaders are often drawn to Shadow IT projects for productivity, affordability and ease-of-use, a trend that is only likely to increase as employees are able to implement new technologies with minimal engineering help. Companies need to understand the risks of Shadow IT to manage and minimize the threats that it poses.

What is Shadow IT? What is Shadow IT?

Here are 5 shadow IT practices that put technology companies at risk:

Practice #1: Substandard Development Techniques

Managers who engage in shadow application development may be operating with a dangerous knowledge deficit. Evaluating development of an application requires a good working knowledge of software architecture, design patterns and the latest secure programming techniques – skills few nontechnical managers possess. Not keeping up with the latest secure programming techniques could lead to security problems that result in a loss of sensitive data.

Practice #2: Over-Reliance on Shadow Cloud Provider Security

Technology managers may assume that cloud providers automatically handle all of their security needs out of the box. If the Shadow IT buyer doesn’t take the time to learn how to use cloud security features, it could leave the cloud environment vulnerable to attack. Security is a shared responsibility and cloud buyers must educate themselves and their teams on how to securely use the new infrastructure.

Practice #3: Unsecured Shadow File Storage

Employees can easily send files to their personal cloud space to work on them at home, but they may fail to take even the most basic security precautions when using these services. Hackers can defeat password protections and gain access to unencrypted personally identifiable information (PII) and protected health information (PHI). Administrators can’t monitor or audit the flow of this data, meaning that in the event of a breach, they can’t be sure which data has been compromised. In addition, the administrator can’t know if an employee’s personal account has been breached.

Shining a Light on Shadow IT

Download our white paper to gain insight into Shadow IT and its unique risk factors faced by technology companies.

Download the white paper
Person using computer in server room to protect against Shadow IT Person using computer in server room to protect against Shadow IT

Practice #4: Unsecured Shadow Mobility

A Bring Your Own Device (BYOD) culture can increase productivity but also introduce security risks, such as employees accessing corporate systems and data on their mobile devices with no security controls in place. Synchronizing between secured and unsecured devices (e.g., corporate laptop and personal tablet) creates another attack point for a cyber thief. Personal devices are also easy to lose, and if a corporate IT department cannot wipe a device remotely, a trained hacker can quickly capture unencrypted corporate data.

Practice #5: Use of Pre-Hacked Shadow IT Drives

Many makers of USB memory sticks, also known as “thumb drives,” do not protect the firmware, which is the embedded software that tells the device what to do when connected to a USB port. A type of weaponized thumb drive attack, known as “BadUSB” can send a sequence of commands to take control of the machine, giving it full administrator privileges. There are no known defenses for these types of USB attacks because malware-scanning software can’t access any USB firmware and its existence won’t show up on security logs.

These are just some of the practices that can put technology companies at risk of a data breach due to the use of Shadow IT. Understanding the risks – and anticipating new ones that will evolve along with technology – can help companies better protect themselves from current and emerging threats.

Learn More About Insuring Innovation for Technology Companies

More Prepare & Prevent

shining a light on a computer as part of shadow IT

Shining a Light on Shadow IT (White Paper)

The benefits of shadow IT are too compelling to ignore, but this trend also hands cyber thieves a golden opportunity.

3D Printing Risks

Preparing for the Risks of 3D Printing in Manufacturing

From property damage risks to intellectual property risks, learn four key risk categories for 3D printing that technology companies should understand.

buildings

What Worries Consumers and Businesses the Most in 2017?

Businesses and consumers share many similar concerns. Find out what businesses and consumers worry about most.

Top Stories
Shadow IT white paper PDF

Shining a Light on Shadow IT

Explore the factors, security threats and risk categories of Shadow IT.

  • Download the white paper

Related Content

  • How to Help Protect Your Intellectual Property
  • How Companies Can Help Reduce Risk From Wearables
  • Password Security Tips

Circuit board

Learn More About Insuring Innovation for Technology Companies


Find an Agent

Need an Agent?

Get the personal service and attention that an agent provides.

Find a local agent in your area:


For Agents

  • Agent Website
  • Become an Agent

See All Technology Content


Travelers logo

Travelers and The Travelers Umbrella are registered trademarks of The Travelers Indemnity Company in the U.S. and other countries.
© 2022 The Travelers Indemnity Company. All rights reserved.

  • Travelers on Facebook
  • Travelers on YouTube
  • Travelers on Twitter
  • Travelers on LinkedIn
  • Travelers on Instagram

Products & Services

  • For Individuals
  • For Businesses
  • Claim Services
  • Prepare & Prevent

Our Company

  • About Travelers
  • Careers
  • Investors
  • Sustainability
  • Travelers Institute

Connect

  • Customer Support
  • MyTravelers®
  • For Agents
  • Find an Agent

Legal & Compliance

  • Terms of Service
  • Privacy & Security
  • Accessibility
  • Producer Compensation Disclosure