As development environments evolve at breakneck speed, our approach to securing them remains stuck in the past. I’ve watched countless organizations implement robust Identity and Access Management (IAM) solutions, deploy Identity Governance and Administration (IGA) tools, and then breathe a collective sigh of relief, believing they’ve solved their access control challenges. But have they? An […]
Staying on Top of Shadow AI
Shadow AI is the new shadow IT—slipping into organizations unseen, reshaping workflows and decisions before leadership realizes it exists.
5 Steps to Avoid Shadow IT Around Low-Code
Shadow IT is far more pervasive than most CIOs think. Cisco Systems estimates that a typical firm has 15 to 22 times more cloud applications than authorized by the IT department. While shadow IT solves problems in the short-term for a select few, undocumented software ultimately encourages tribal thinking and siloed departments. This can stunt […]
DevOps Chats: Shadow Code Security with PerimeterX
When the cloud first caught on, there was a problem with Shadow IT—developers spinning up instances in AWS without the IT team knowing they existed. Now with the ease of CI/DC automated deployments, the problem of Shadow Code—code being added to apps that did not go through the entire team process—has arisen. In this DevOps […]
Taming the Shadow IT Beast and Runaway Spend
Do you know how much IT resources your employees are consuming? According to research conducted by the Everest Group, shadow IT spending accounts for a whopping 50% or more of the IT budget. Beyond these costs, shadow IT could end up costing you big in terms of a security breach: Gartner estimates that 33% of […]
Three Insights from the World’s Leading IT Organizations
IT is in a state of change on a consistent basis, but never more so than now. With the increasing importance of the digital customer experience across all industries, technology is at a new inflection point in how it can fundamentally impact executive priorities. And while nobody can speak for the direction of IT as […]
Modern Workers Demand Modern Technology
Companies today must think of their employees as customers and employ technology, including mobile apps, that employees want to use. I have always been a bit of a technophile. Many years ago, in another life, when I worked in technology sales, I was one of the first sales engineers on my team to buy a […]
Has DevOps Caused the Re-emergence of Shadow IT?
Shadow IT is back, and this time, it’s in the DevOps toolstack “One of our clients conducted an audit and found more than 10,000 Jenkins instances across their IT landscape!” This remark from a tooling vendor that helps enterprises centralize their continuous integration infrastructure really took me by surprise. For starters, I was impressed how […]
Citizen Developers Can Benefit an Organization
In many organizations, IT resources are pushed to the breaking point while users increasingly demand new technologies, features and capabilities. Users who know a thing or two—often just enough to be dangerous—sometimes “expedite” matters by finding their own shadow IT solutions. Organizations can harness those efforts, though, as citizen developers by finding a way for […]
Should Citizen Developers be Welcome in DevOps?
“We’re all developers now. Citizen developer activities will accelerate.” That’s what Gartner predicted back in 2012. Fast forward more than four years and we’ve seen the DevOps movement explode, while the rise of citizen developers has also marched steadily. The challenge for organizations is to figure out how these two philosophies co-exist and complement one […]










