Shadow cloud
Take a balanced approach — reduce the risks of shadow cloud while taking advantage of the opportunities created by managing it.
-
Why people use shadow cloud
People in organisations sometimes use public cloud services without getting formal approval — find out why.
-
What to do about shadow cloud in your organisation
Managing shadow cloud is the best action to take — support your efforts by also taking action in other areas of your organisation.
-
Benefits of managing shadow cloud
Respect the mahi and mana of the people in your organisation — make sure they have the tools they need to do their work.
-
Manage shadow cloud in your organisation
Bring your organisation’s use of public cloud into line with its cloud plan and Cabinet’s requirement for risk assessments.
- How to manage shadow cloud in your organisation
- Identify shadow cloud in your organisation
- Categorise shadow cloud services
- Prioritise the most important services
- Assess the risks of information in shadow cloud services
- Make decisions based on your priorities and risk assessments
- Catalogue approved services
- Actively manage shadow cloud in your organisation
- Fit approved services with your other technology
-
Risks of shadow cloud to government organisations
Shadow cloud increases risk to your organisation, the NZ government and New Zealanders by not making the risks to your information known — this prevents you from using security controls effectively.
-
Problems with extreme approaches to shadow cloud
Whether it’s a hands-off-the-wheel or an overly strict approach, both often create the same or similar outcomes — all mostly negative for your organisation, the NZ government and New Zealanders.
