Shadow IT refers to the use of unauthorized or unapproved software tools by employees without the knowledge of IT or procurement teams.

It poses significant security and compliance risks, as these tools may not adhere to organizational standards or security policies, leading to potential vulnerabilities and lack of control.