Cisco has launched a service, called Cloud Consumption Services, that sniffs out surreptitious cloud users practicing shadow IT. The service also analyzes the risk and helps IT manage use.
Shadow IT: 8 Ways To Cope
(Click image for larger view and slideshow.)
Amid the rapid growth in use of cloud services, Cisco is warning enterprises that their employees use more outside services than IT realizes. To help combat this, the company is offering an online tool with which IT can identify and track such use.
Cisco's Robert Dimicco, senior director of Advanced Services, wrote in a blog post that enterprise IT can now subscribe to Cisco Cloud Consumption Services, an online tool designed to determine how cloud services are being used by employees.
Cloud use by the enterprise was up 112% in most enterprises, Cisco estimated from its own survey of customers. The unauthorized use of services "is becoming a major headache for IT leaders. On average, large organizations are now using 1,220 individual cloud services, largely without oversight, which leads to increased risk and spiraling costs," Dimicco wrote in the blog post.
Common forms of shadow IT include:
Shared storage that's moved sensitive data into Box or Dropbox offsite
Servers being used by developers who were too impatient to wait for the latest purchase order to be delivered
Mobile apps that were downloaded to smartphones and hold information on potential clients
In some cases, marketing campaigns have been conceived, debated, and set up for execution, all outside the purview of IT, because business users deemed them too pressing to be delayed by going through the usual channels. Such maneuvers raise the risk of proprietary data exposure and compliance violation. There's also the hazard to business continuity that unchecked code from the outside may get injected into production systems.
What's it going to cost to keep shadow IT in check? About $1 to $2 per employee per month, by Dimicco's estimate. Cisco Cloud Consumption Services will be administered mainly by partners and systems integrators working with Cisco.
Dimicco recounted an exchange he had with Chris Jennings, president of Aqueduct Technologies in Boston, one such partner. Jennings told him: "I had conversation with a VP of IT at one of my larger customers. I was able to show him data in the Cloud Consumption dashboard and he was amazed at cloud services he didn't realize they are using."
The Cisco service inspects network traffic to identify the cloud services being used, who's using them, the amount they're being used, and the risk profile of that use. The analysis side of the product helps IT managers govern the use of the services and manage the danger of proprietary data being sent off-premises.
A user cited in the announcement was CityMD, a New York City and New Jersey doctors group, which employed Cisco Cloud Consumption Services to discover employees using 522 cloud services, even though IT supported only 15 to 20 of them. The announcement cited Robert Florescu, vice president of IT, as saying: "Now that we have full visibility into our cloud usage, we can make educated decisions that are right for the business and get a better idea of what risks we may face."
Florescu said the emergency room doctors in the group want information out of the cloud quickly, and CityMD wants to "ensure we have appropriate security and compliance measures in place."
Charles Babcock is an editor-at-large for InformationWeek and author of Management Strategies for the Cloud Revolution, a McGraw-Hill book. He is the former editor-in-chief of Digital News, former software editor of Computerworld and former technology editor of Interactive ... View Full Bio
SaaS As Innovation Driver?Software as a service is the clear No. 1 way enterprises consume cloud. InformationWeek's SaaS Innovation Survey reveals three tips to get the most from SaaS: Make it a popularity contest. Have an escape plan. And remember that identity is the new perimeter.
Top IT Trends to Watch in Financial ServicesIT pros at banks, investment houses, insurance companies, and other financial services organizations are focused on a range of issues, from peer-to-peer lending to cybersecurity to performance, agility, and compliance. It all matters.
Join us for a roundup of the top stories on InformationWeek.com for the week of September 25, 2016. We'll be talking with the InformationWeek.com editors and correspondents who brought you the top stories of the week to get the "story behind the story."