Shadow IT in higher education: survey and case study for cybersecurity

Orr, Selma Gomez; Bonyadi, Cyrus Jian; Golaszewski, Enis; Sherman, Alan T.; Petérson, Peter A.; Forno, Richard; Johns, Sydney; Rodriguez, Jimmy

doi:10.1080/01611194.2022.2103754

Cited by 4 publications

(5 citation statements)

References 25 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Além disso, no que diz respeito à importância das medidas relacionadas à segurança e aos riscos computacionais, para (Walters, 2013), a aplicação de medidas de segurança apropriadas para gerenciar riscos é necessária no contexto de Shadow IT. Ainda, (Orr et al, 2022) destaca a importância da preocupação com riscos cibernéticos nesse contexto. (Hakvoort, 2022) avaliou que funcionários capacitados no tema de segurança da informação terão maior capacidade de avaliar seus riscos ao usarem Shadow IT (PL23, por exemplo).…”

Section: Ameaçasunclassified

Shadow IT e TI gerenciada pelo negócio: uma análise das percepções sobre os riscos e benefícios em uma organização pública brasileira do setor financeiro

Aragão,

Streit

2023

risti

View full text Add to dashboard Cite

O advento da computação pessoal transformou a forma como trabalhamos, com a tecnologia da informação (TI) desempenhando um papel fundamental nos negócios. No entanto, o aumento no uso de recursos tecnológicos levou ao fenômeno conhecido como Shadow IT, onde os recursos são usados sem o conhecimento do departamento de TI, o que gera preocupações de segurança. Pesquisas recentes destacam benefícios e riscos associados a esse fenômeno. Esta pesquisa examinou as percepções dos gestores de uma organização pública brasileira do setor financeiro em relação às práticas que podem promover a TI gerenciada pelo negócio.

show abstract

Section: Ameaçasunclassified

Shadow IT e TI gerenciada pelo negócio: uma análise das percepções sobre os riscos e benefícios em uma organização pública brasileira do setor financeiro

Aragão,

Streit

2023

risti

View full text Add to dashboard Cite

show abstract

“…"Shadow IT" (SIT) refers to the growing practice of using IT resources outside of the official company infrastructure to get work done (S Haag & Eckhardt, 2014;Kopper, 2017;Silic, Barlow, & Back, 2017). Excel spreadsheets, apps that are integrated into organizational systems (SIT can be on company-owned devices, personal devices, or in the cloud), and apps used to complete daily work are all examples of SIT (Orr et al, 2022), or software used for routine tasks (Raković, Sakal, Dakić, & Đurković, 2022;Raković, Sakal, Matković, & Marić, 2020).…”

Section: Introductionmentioning

confidence: 99%

“…Moreover, the use of SIT in tertiary institutions exhibits distinct trends and patterns relating to its shape, function, and security risk. (Orr et al, 2022), In addition to the requirement that universities in Indonesia disclose academic and non-academic data on both individuals and institutions, this allows employees to utilize IT resources not provided by the university. Whether they are aware of it or not, the academic environment, particularly higher education, has the potential to use SIT in their daily activities.…”

Section: Introductionmentioning

confidence: 99%

“…Whether they are aware of it or not, the academic environment, particularly higher education, has the potential to use SIT in their daily activities. Orr et al (2022) stated that the use of SIT in an academic setting is concealed, occasionally conceals actual problems, and creates security issues. (Orr et al, 2022).…”

Section: Introductionmentioning

confidence: 99%

“…Orr et al (2022) stated that the use of SIT in an academic setting is concealed, occasionally conceals actual problems, and creates security issues. (Orr et al, 2022). This was confirmed by Rakovic et al (2020), who stated that the lack of user awareness made the use of SIT problematic for organizations (Rakovic, Duc, & Vukovic, 2020).…”

Section: Introductionmentioning

confidence: 99%

See 2 more Smart Citations

Does Individual IT Experience Affect Shadow IT Usage? Empirical Evidence from Universities with Legal Entities in Indonesia

Nurfitriansyah,

Munir,

Disman

et al. 2023

Organizacija

View full text Add to dashboard Cite

Background and purpose Employee dissatisfaction with extant technology is one of the causes of shadow IT use. The selection of alternative technologies is determined by individual IT knowledge. In this study, we intend to examine the relationship between individual IT experience and the use of shadow IT in Indonesian higher education through two job characteristics, namely task identity and autonomy. Methods This study collects and analyses data from 301 respondents at Indonesian universities with legal status using a quantitative methodology. The direct relationship in the research model was investigated using Smart-PLS data analysis. Results The results of the study indicate that individual IT experience strongly supports the use of shadow IT by tertiary institutions with legal entities employees in Indonesia, either through task identity or job autonomy. Conclusion In order for employees to feel satisfied, the organization must prioritize employee IT experience and the information technology requirements they require to complete their work. This can be accomplished by involving employees in the development of information technology.

show abstract

Cyber Threats Classifications and Countermeasures in Banking and Financial Sector

Darem,

Alhashmi,

Alkhaldi

et al. 2023

IEEE Access

View full text Add to dashboard Cite

The banking and financial sector has always been a prime target for cyber threats due to the critical nature of the information they handle. With the increasing dependence on technology and digital transformation, the sector is facing more complex and sophisticated threats from cybercriminals. The banking sector serves as the backbone of a country's economy, interlinked with various other sectors like petroleum, mining, health, and industry. Any significant damage to the banking sector can send shockwaves through the entire economic landscape. Therefore, cyber threat classifications play a crucial role in risk management and provide a valuable framework for understanding and responding to cyber threats. Understanding the potential impact of a cyber-attack helps organisations assess the risks they face and develop appropriate risk mitigation strategies. The purpose of this research paper is to provide a comprehensive analysis of cyber threats in the banking and financial sectors, including identifying common threats, their nature and character to help in classification. One of the significant contributions of this research paper is to classify cyber threats to the banking and financial sectors based on their severity and technicality. This classification helps to identify the appropriate countermeasures required to mitigate the risks of each type of threat. Furthermore, the paper explores the technical, non-technical, organizational countermeasures and the legal and regulatory measures used to protect financial transactions from cyber threats. This research work delves into the challenges and limitations of cyber threat classifications, focusing specifically on those confronting the banking and financial sector in their pursuit of robust cybersecurity. Additionally, it analyses recent trends and developments in the field, highlighting the evolving nature of cyber threats to banking. The most significant challenge is the rapidly evolving nature of cyber threats, making it challenging to keep up with the latest trends and technologies.

show abstract

Shadow IT in higher education: survey and case study for cybersecurity

Abstract: County (UMBC) ScholarWorks@UMBC digital repository on the Maryland Shared Open Access (MD-SOAR) platform.

Cited by 4 publications

References 25 publications

Shadow IT e TI gerenciada pelo negócio: uma análise das percepções sobre os riscos e benefícios em uma organização pública brasileira do setor financeiro

Shadow IT e TI gerenciada pelo negócio: uma análise das percepções sobre os riscos e benefícios em uma organização pública brasileira do setor financeiro

Does Individual IT Experience Affect Shadow IT Usage? Empirical Evidence from Universities with Legal Entities in Indonesia

Cyber Threats Classifications and Countermeasures in Banking and Financial Sector

Contact Info

Product

Resources

About