Shadow cloud — concerns and opportunities
Take a balanced approach — reduce the risks of shadow cloud while taking advantage of the opportunities created by managing it.
Why people use shadow cloud
People in organisations sometimes use public cloud services without getting formal approval — find out why.
What to do about shadow cloud in your organisation
Managing shadow cloud is the best action to take — support your efforts by also taking action in other areas of your organisation.
Benefits of managing shadow cloud
Respect the mahi and mana of the people in your organisation — make sure they have the tools they need to do their work.
Manage shadow cloud in your organisation
Bring your organisation’s use of public cloud into line with its cloud plan and Cabinet’s requirement for risk assessments.
- How to manage shadow cloud in your organisation
- Identify shadow cloud in your organisation
- Categorise shadow cloud services
- Prioritise the most important services
- Assess the risks of information in shadow cloud services
- Make decisions based on your priorities and risk assessments
- Catalogue approved services
- Actively manage shadow cloud in your organisation
- Fit approved services with your other technology
Risks of shadow cloud to government organisations
Shadow cloud increases risk to your organisation, the NZ government and New Zealanders by not making the risks to your information known — this prevents you from using security controls effectively.
Problems with extreme approaches to shadow cloud
Whether it’s a hands-off-the-wheel or an overly strict approach, both often create the same or similar outcomes — all mostly negative for your organisation, the NZ government and New Zealanders.