Vanson Bourne Data Summary: Shadow IT - IT Decision-Makers

Shadow ITITDMs Data Summary

11th July 2014

Intelligent Market Research

Is “shadow IT” happening? How is “shadow IT” happening?

Around three quarters (77%) of IT decision-makers surveyed say that departments in their

organisation are commissioning and sourcing core IT products and services independent of

the IT department (sheet 1). Of the remaining quarter whose organisations only source IT

products and services through the IT department, around two fifths (42%) expect “shadow

IT” to occur in the near future in their organisation (page 12).

Surveyed IT decision-makers who say that departments in their organisation engage in

“shadow IT” currently report that the vast majority (95%) have been doing so for over six

months, with around two fifths (42%) engaging in it for two years or longer (page 11).

Almost half (47%) of respondents where “shadow IT” is happening, but not in all departments

within their organisation, believe that it is likely that more departments will engage in

“shadow IT” in the next two years (page 9). Where “shadow IT” is happening, 51% think it is

likely the departments which already commission and source core IT services and products

outside the IT department will do so more often in the coming two years (page 10).

The vast majority (85%) of surveyed IT decision-makers feel the use of “shadow IT” poses a risk

to their organisation’s IT security, with a third (33%) considering it to be an extremely

significant risk and 16% considering it the most significant risk (page 34).

Respondents who report that “shadow IT” is happening in their organisation say that it most

likely originates and is driven by heads of department (41%) and from technology

workgroups comprised of people from across the department (39%) (page 33). According

to respondents, the main driving factors behind departments engaging in “shadow IT” are

their belief that it is quicker to source their own IT than to go through the IT department

(74%), and that departments are more aware of their own individual IT needs (55%). Where

“shadow IT” is happening, over half (52%) of surveyed IT decision-makers also believe that

departments think it is easier to source their own IT needs than go through the IT

department and around three in ten (28%) feel it is cheaper (page 8).

Of those respondents in organisations where departments are commissioning and sourcing

core IT services and products outside of the IT department, almost half (46%) say that the IT

department has little or no involvement in these departments (page 32).

Core IT products and services

Surveyed IT decision-makers where “shadow IT” is happening report that the products and

services most commonly sourced outside of the IT department are application software

(51%) and IT security software/hardware (44%) (page 5-6).

Respondents whose organisations are not currently engaging in “shadow IT”, but anticipate it

happening in the near future, believe that application software (53%) and BYOD devices for

employees (53%) are the most likely to be commissioned outside of IT in the next two years.

IT security software/hardware is only expected to be sourced through “shadow IT” methods

by around a quarter (26%) in the same period (page 22).


02 | Vanson Bourne - Shadow IT - ITDMs Data Summary

Where is “shadow IT” happening?

Almost four in ten (37%) respondents who report that “shadow IT” is already happening

within their organisation believe that the majority of their organisation’s departments are

engaged in commissioning and sourcing core IT services/products (page 7), with this most

commonly occurring in finance (39%), HR/training (35%), business direction and strategy

(34%) and marketing (34%) (sheet 8). For this group, business direction and strategy is

thought to be the department where “shadow IT” it is most prevalent (42%) (page 16).

Surveyed IT decision-makers whose organisations do not currently engage in “shadow IT”,

but expect to in the near future, anticipate business direction and strategy (38%), HR/training

(38%) and logistics and supply chain (38%) to be departments where “shadow IT” will most

likely happen in their organisation (page 19).



Contents



5-6 Which of the following core IT products/services are being commissioned and sourced by

departments other than the IT department?

7 How many of your organisation's departments do you believe are commissioning and sourcing

core IT products/services without the IT department?

8 Which of the following factors do you see as driving departments outside of IT to commission

and source core IT products/services?

9 In your opinion, how likely is it that more business departments in your organisation will engage

in IT acquisition beyond the IT department's control or influence over the next two years?

10 In your opinion, how likely is it that those business departments that engage in IT acquisition

beyond the IT department's control or influence will do so more often over the next two years?

11 You have said that core IT products/services have been commissioned and sourced by

departments other than IT. How long has this been happening in your organisation?

12 You have said that only the IT department is commissioning and sourcing core IT

products/services at present. Do you expect "shadow IT" to occur in your organisation?

13-15 In which business departments is "shadow IT" happening?

16-18 In which business department is "shadow IT" most prevalent?

19-21 In which departments do you imagine 'shadow IT' is most likely to happen?

22 Which core IT products/services do you think your business departments will be likely to

commission and source outside of the IT department in the next two years? Combination grid

showing those responses rated '4' and '5 - very likely' i.e. likely


commission and source outside of the IT department in the next two years? Servers


commission and source outside of the IT department in the next two years? Other infrastructure

hardware


commission and source outside of the IT department in the next two years? Application software

(cloud-based or otherwise)


commission and source outside of the IT department in the next two years? Other software

(cloud-based or otherwise)


commission and source outside of the IT department in the next two years? Other XaaS

cloud-based services


commission and source outside of the IT department in the next two years? Application

development


commission and source outside of the IT department in the next two years? IT security

software/hardware


commission and source outside of the IT department in the next two years? Devices for

employees to use for work purposes (BYOD)


commission and source outside of the IT department in the next two years? Communications

services of any kind

32 Thinking about the departments you mentioned and the products being sourced by them, are

you able to say to what extent the IT department is typically involved?

33 Where do you believe the drive for "shadow IT" originates in the departments that are sourcing

their own IT?

34 How significant a risk does "shadow IT" pose to your organisation's IT security?

Demographics

35 Respondent country

36 How many employees does your organisation have?

37 Within which sector is your organisation?

Which of the following core IT products/services are being commissioned and sourced by departments other than the IT department?


Total UK Us

Base: all respondents

Application software (on-premise or cloud-based) 51% 38% 63%

IT security software/hardware 44% 22% 65%

Application development 40% 22% 58%

Devices for employees to use for work purposes (BYOD) 40% 18% 61%

Servers 38% 15% 60%

Communications services of any kind 33% 16% 50%

Other software (on-premise or cloud-based) 31% 19% 42%

Other infrastructure hardware 23% 11% 34%

Other XaaS cloud-based services 21% 5% 36%

Other (please specify) 0% 0% 0%

We do not know the specifics 2% 3% 0%

Only the IT department is commissioning and sourcing core IT products/services 23% 31% 14%

Base 200 100 100

Total1001-3000employees

More than 3000 employees


Application software (on-premise or cloud-based) 51% 47% 55%




Servers 38% 35% 40%


Other software (on-premise or cloud-based) 31% 22% 39%




We do not know the specifics 2% 2% 1%

Only the IT department is commissioning and sourcing core IT products/services 23% 24% 21%

Base 200 101 99

Retail, distribution and transport

Other commercial sector

Which of the following core IT products/services are being commissioned and sourced by departments other than the IT department?


TotalFinancialservices Manufacturing


Application software (on-premise or cloud-based) 51% 40% 41% 65% 58%

IT security software/hardware 44% 31% 39% 50% 54%

Application development 40% 35% 37% 48% 40%

Devices for employees to use for work purposes (BYOD) 40% 38% 28% 59% 37%

Servers 38% 23% 39% 46% 42%

Communications services of any kind 33% 27% 37% 41% 27%

Other software (on-premise or cloud-based) 31% 21% 24% 41% 37%

Other infrastructure hardware 23% 13% 22% 41% 15%

Other XaaS cloud-based services 21% 8% 15% 41% 19%

Other (please specify) 0% 0% 0% 0% 0%

We do not know the specifics 2% 2% 2% 0% 2%

Only the IT department is commissioning and sourcing core IT products/services 23% 27% 30% 20% 13%

Base 200 48 54 46 52


How many of your organisation's departments do you believe are commissioning and sourcing core IT products/services without the IT department?

Total US

Base: respondents whose organisations have departments outside of IT

commissioning/sourcing IT products/services (page 5-6)

Very few 34% 42% 27%

Less than half 28% 32% 26%

The majority 15% 10% 19%

Nearly all 13% 7% 17%

All departments 9% 6% 12%

Don't know 1% 3% 0%

Base 155 69 86

Total



Very few 34% 38% 29%

Less than half 28% 26% 31%

The majority 15% 17% 13%

Nearly all 13% 8% 18%

All departments 9% 10% 8%

Don't know 1% 1% 1%

Base 155 77 78

1001-3000employees


Total Manufacturing



Very few 34% 29% 45% 16% 42%

Less than half 28% 34% 24% 30% 27%

The majority 15% 20% 21% 16% 4%

Nearly all 13% 9% 11% 22% 11%

All departments 9% 6% 0% 14% 16%

Don't know 1% 3% 0% 3% 0%

Base 155 35 38 37 45

Financialservices



UK


Which of the following factors do you see as driving departments outside of IT to commission and source core IT products/services?

Total US



Departments feel they understand their own IT needs in greater depth than the IT department 55% 43% 64%

Departments believe it is quicker to source their own IT needs than to go through IT 74% 70% 78%

Departments believe it is easier to source their own IT needs than to go through IT 52% 39% 62%

Departments believe it is cheaper to source their own IT needs than to go through IT 28% 25% 30%

*Other (please specify) 1% 3% 0%

Base 155 69 86

Total



Departments feel they understand their own IT needs in greater depth than the IT department 55% 49% 60%

Departments believe it is quicker to source their own IT needs than to go through IT 74% 71% 77%

Departments believe it is easier to source their own IT needs than to go through IT 52% 55% 49%

Departments believe it is cheaper to source their own IT needs than to go through IT 28% 22% 33%


Base 155 77 78

1001-3000employees


Total Manufacturing



Departments feel they understand their own IT needs in greater depth than the IT department 55% 34% 66% 73% 47%

Departments believe it is quicker to source their own IT needs than to go through IT 74% 74% 66% 84% 73%

Departments believe it is easier to source their own IT needs than to go through IT 52% 46% 61% 51% 49%

Departments believe it is cheaper to source their own IT needs than to go through IT 28% 20% 21% 46% 24%


Base 155 35 38 37 45

Financialservices



UK

In your opinion, how likely is it that more business departments in your organisation will engage in IT acquisition beyond the IT

department's control or influence over the next two years?

Total US

Base: respondents whose organisations' departments are not solely

commissioning/sourcing IT products/services without the IT department (page 7)

1 – very unlikely 13% 23% 4%

2 13% 23% 5%

3 27% 31% 24%

4 20% 12% 26%

5 – very likely 27% 11% 41%

Average 3.35 2.65 3.95

Base 141 65 76

Total



1001-3000

employees

More than 3000

employees

Total Manufacturing



1 – very unlikely 13% 9% 11% 9% 21%

2 13% 9% 11% 13% 21%

3 27% 42% 32% 13% 21%

4 20% 27% 21% 19% 13%

5 – very likely 27% 12% 26% 47% 24%

Average 3.35 3.24 3.42 3.81 2.97

Base 141 33 38 32 38

Financial

services

Retail, distribution

and transport

Other commercial

sector

UK



2 13% 9% 18%

3 27% 36% 18%

4 20% 22% 18%

5 – very likely 27% 22% 32%

Average 3.35 3.33 3.36

Base 141 69 72


In your opinion, how likely is it that those business departments that engage in IT acquisition beyond the IT department's control or

influence will do so more often over the next two years?

Total US

Base: rrespondents whose organisations have departments outside of IT



2 11% 17% 6%

3 27% 38% 19%

4 30% 17% 40%

5 – very likely 21% 9% 31%

Average 3.39 2.80 3.87

Base 155 69 86

Total




2 11% 6% 15%

3 27% 32% 22%

4 30% 35% 24%

5 – very likely 21% 17% 26%

Average 3.39 3.44 3.35

Base 155 77 78

1001-3000

employees

More than 3000

employees

Total Manufacturing



1 – very unlikely 11% 6% 13% 5% 18%

2 11% 11% 11% 11% 11%

3 27% 46% 29% 11% 24%

4 30% 31% 34% 38% 18%

5 – very likely 21% 6% 13% 35% 29%

Average 3.39 3.20 3.24 3.86 3.29

Base 155 35 38 37 45

Financial

services


and transport

Other commercial

sector

UK


You have said that core IT products/services have been commissioned and sourced by departments other than IT. How long has this been happening in your organisation?

Total US



Two years or more 42% 58% 29%

Between six months and two years 53% 36% 66%

Less than six months 5% 6% 5%

Base 155 69 86

Total



Two years or more 42% 32% 51%

Between six months and two years 53% 62% 44%

Less than six months 5% 5% 5%

Base 155 77 78

1001-3000employees


Total Manufacturing



Two years or more 42% 34% 34% 59% 40%

Between six months and two years 53% 60% 63% 38% 51%

Less than six months 5% 6% 3% 3% 9%

Base 155 35 38 37 45

Financialservices



UK


You have said that only the IT department is commissioning and sourcing core IT products/services at present. Do you expect "shadow IT" to occur in your organisation?

Total UK US

Base: respondents whose organisations do not have departments outside of IT


Yes, we expect it to happen in the near future 42% 32% 64%

No, we never expect it to happen 58% 68% 36%

Base 45 31 14



Yes, we expect it to happen in the near future 42% 33% 52%

No, we never expect it to happen 58% 67% 48%

Base 45 24 21

1001-3000employees

More than 3000 employeesTotal



Financialservices

ManufacturingTotal Retail, distribution and transport


Yes, we expect it to happen in the near future 42% 23% 56% 33% 57%

No, we never expect it to happen 58% 77% 44% 67% 43%

Base 45 13 16 9 7


In which business departments is "shadow IT" happening?

Total UK US



Finance 39% 26% 49%

HR/training 35% 28% 41%

Business direction and strategy 34% 19% 47%

Marketing 34% 28% 40%

Operations 31% 23% 37%

Quality control 31% 9% 49%

Design/R&D 30% 22% 36%

Engineering 30% 16% 41%

Client services/relationship management 29% 14% 41%

Risk/fraud/compliance/governance 27% 12% 40%

Logistics/supply chain/transport/fleet 25% 13% 34%

Sales 24% 6% 38%

Facilities/property 22% 17% 26%

Production/manufacturing 22% 14% 28%

Purchasing/procurement 21% 13% 27%

Property 17% 9% 24%

Legal 16% 12% 20%

Health and safety 14% 7% 20%

Trading/merchandising/retail shop floor 11% 6% 15%

Other department not listed here (please specify) 1% 1% 0%

Base 155 69 86

Other department not listed here (please specify): This happened for one project and has now been stopped




Base: respondents whose organisations have departments outside of IT commis-

sioning/sourcing IT products/services (page 5-6)

Finance 39% 32% 45%






Design/R&D 30% 23% 36%





Sales 24% 12% 36%




Property 17% 5% 29%

Legal 16% 6% 26%




Base 155 77 78




TotalFinancial services

Base: respondents whose organisations have departments outside of IT commis-

sioning/sourcing IT products/services (page 5-6)



Finance 39% 31% 42% 51% 31%

HR/training 35% 40% 21% 51% 29%

Business direction and strategy 34% 23% 39% 54% 22%

Marketing 34% 51% 24% 38% 27%

Operations 31% 31% 18% 46% 29%

Quality control 31% 23% 39% 46% 18%

Design/R&D 30% 20% 29% 51% 20%

Engineering 30% 6% 37% 57% 20%

Client services/relationship management 29% 34% 13% 49% 22%

Risk/fraud/compliance/governance 27% 17% 26% 51% 16%

Logistics/supply chain/transport/fleet 25% 14% 37% 43% 7%

Sales 24% 11% 29% 43% 13%

Facilities/property 22% 14% 11% 59% 7%

Production/manufacturing 22% 11% 26% 41% 11%

Purchasing/procurement 21% 11% 13% 41% 18%

Property 17% 14% 5% 49% 4%

Legal 16% 11% 11% 35% 9%

Health and safety 14% 11% 5% 35% 7%

Trading/merchandising/retail shop floor 11% 3% 3% 35% 4%

Other department not listed here (please specify) 1% 0% 0% 0% 2%

Base 155 35 38 37 45

Manufacturing


In which business department is "shadow IT" most prevalent?

Total UK US


commissioning/sourcing IT products/services (sheet 1). Respondents only saw

those answers selected on page 13-15


Base 53 13 40


Base 45 10 35

Design/R&D 15% 33% 6%

Base 46 15 31


Base 46 11 35


Base 34 12 22

Finance 28% 50% 19%

Base 60 18 42


Base 22 5 17


Base 54 19 35

Legal 0% 0% 0%

Base 25 8 17


Base 38 9 29


Base 53 19 34


Base 48 16 32


Base 34 10 24

Property 4% 17% 0%

Base 27 6 21


Base 32 9 23


Base 48 6 42


Base 42 8 34

Sales 5% 50% 0%

Base 37 4 33


Base 17 4 13

Other 100% 100% -

Base 1 1 0


In which business department is "shadow IT" most prevalent? Ctd







Base 53 25 28


Base 45 24 21

Design/R&D 15% 17% 14%

Base 46 18 28


Base 46 14 32


Base 34 12 22

Finance 28% 24% 31%

Base 60 25 35


Base 22 5 17


Base 54 26 28

Legal 0% 0% 0%

Base 25 5 20


Base 38 14 24


Base 53 32 21


Base 48 13 35


Base 34 7 27

Property 4% 0% 4%

Base 27 4 23


Base 32 7 25


Base 48 19 29


Base 42 14 28

Sales 5% 11% 4%

Base 37 9 28


Base 17 3 14

Other 100% - 100%

Base 1 0 1


In which business department is "shadow IT" most prevalent? Ctd

TotalFinancialservices




Retail, distribution and transpor

Other commercial sectorManufacturing


Base 53 8 15 20 10


Base 45 12 5 18 10

Design/R&D 26% 0% 18% 32% 44%

Base 46 7 11 19 9

Engineering 37% 0% 29% 38% 56%

Base 46 2 14 21 9


Base 34 5 4 22 3

Finance 28% 36% 44% 16% 21%

Base 60 11 16 19 14


Base 22 4 2 13 3

HR/training 22% 36% 13% 16% 23%

Base 54 14 8 19 13

Legal 0% 0% 0% 0% 0%

Base 25 4 4 13 4


Base 38 5 14 16 3

Marketing 32% 28% 33% 29% 42%

Base 53 18 9 14 12

Operations 23% 36% 29% 12% 23%

Base 48 11 7 17 13


Base 34 4 10 15 5

Property 4% 0% 0% 6% 0%

Base 27 5 2 18 2


Base 32 4 5 15 8


Base 48 8 15 17 8


Base 42 6 10 19 7

Sales 5% 0% 18% 0% 0%

Base 37 4 11 16 6


Base 17 1 1 13 2

Other 100% - - - 100%

Base 1 0 0 0 1


In which departments do you imagine "shadow IT" is most likely to happen?

Total UK US

Base: Base: respondents who expect "shadow IT" to happen in their organisation in

the near future on page 12




Finance 31% 25% 38%



Design/R&D 19% 25% 13%




Sales 19% 0% 38%


Legal 13% 0% 25%






Property 0% 0% 0%


Base 19 10 9




Base: respondents who expect "shadow IT" to happen in their organisation in the

near future on page 12




Finance 31% 43% 22%



Design/R&D 19% 29% 11%




Sales 19% 29% 11%


Legal 13% 29% 0%






Property 0% 0% 0%


Base 19 8 11




TotalFinancial services


near future on page 12




HR/training 38% 67% 38% 0% 33%


Finance 31% 33% 25% 100% 0%

Marketing 31% 0% 50% 0% 33%

Operations 25% 67% 25% 0% 0%

Design/R&D 19% 33% 25% 0% 0%

Engineering 19% 33% 25% 0% 0%



Sales 19% 33% 13% 0% 33%


Legal 13% 33% 13% 0% 0%






Property 0% 0% 0% 0% 0%

Other department not listed here (please specify) 0% 0% 0% 0% 0%

Base 19 3 9 3 4

Manufacturing


Which core IT products/services do you think your business departments will be likely to commission and source outside of the IT department in the next two years? Combination grid showing those responses rated '4' and '5 - very likely' i.e. likely

Total UK Us


near future (page 12)

Application software (cloud-based or otherwise) 53% 50% 56%



Other software (cloud-based or otherwise) 37% 30% 44%





Servers 21% 20% 22%

Base 19 10 9





Application software (cloud-based or otherwise) 53% 50% 55%



Other software (cloud-based or otherwise) 37% 25% 45%





Servers 21% 38% 9%

Base 19 8 11

TotalFinanciaservices





Application software (cloud-based or otherwise) 53% 33% 56% 67% 50%

Devices for employees to use for work purposes (BYOD) 53% 33% 67% 33% 50%

Application development 42% 33% 44% 33% 50%

Other software (cloud-based or otherwise) 37% 0% 44% 33% 50%

Communications services of any kind 32% 33% 22% 33% 50%

Other XaaS cloud-based services 26% 33% 22% 0% 50%

Other infrastructure hardware 26% 67% 11% 33% 25%

IT security software/hardware 26% 33% 33% 0% 25%

Servers 21% 33% 11% 33% 25%

Base 19 3 9 3 4

Manufacturing


Which core IT products/services do you think your business departments will be likely to commission and source outside of the IT department in the next two years?

Total US



1 – not at all likely 47% 50% 44%

2 26% 20% 33%

3 5% 10% 0%

4 16% 20% 11%

5 – very likely 5% 0% 11%

Average 2.05 2.00 2.11

Base 19 10 9

Total




2 26% 25% 27%

3 5% 0% 9%

4 16% 25% 9%


Average 2.05 2.50 1.73

Base 19 8 11

1001-3000employees


Total Manufacturing



1 – not at all likely 47% 67% 56% 67% 0%

2 26% 0% 33% 0% 50%

3 5% 0% 0% 0% 25%

4 16% 33% 0% 33% 25%

5 – very likely 5% 0% 11% 0% 0%

Average 2.05 2.00 1.78 2.00 2.75

Base 19 3 9 3 4

Financialservices



UK


Which core IT products/services do you think your business departments will be likely to commission and source outside of the IT department in the next two years? Other infrastructure hardware

Total US




2 21% 20% 22%

3 11% 0% 22%

4 16% 10% 22%

5 – very likely 11% 10% 11%

Average 2.32 1.90 2.78

Base 19 10 9

Total




2 21% 13% 27%

3 11% 13% 9%

4 16% 25% 9%

5 – very likely 11% 25% 0%

Average 2.32 3.13 1.73

Base 19 8 11

1001-3000employees


Total Manufacturing

Base: arespondents who expect "shadow IT" to happen in their organisation in the


1 – not at all likely 42% 33% 56% 33% 25%

2 21% 0% 11% 33% 50%

3 11% 0% 22% 0% 0%

4 16% 33% 0% 33% 25%

5 – very likely 11% 33% 11% 0% 0%

Average 2.32 3.33 2.00 2.33 2.25

Base 19 3 9 3 4

Financialservices



UK


Which core IT products/services do you think your business departments will be likely to commission and source outside of the IT department in the next two years?Application software (cloud-based or otherwise)

Total US




2 11% 10% 11%

3 16% 10% 22%

4 42% 50% 33%

5 – very likely 11% 0% 22%

Average 3.11 2.80 3.44

Base 19 10 9

Total




2 11% 25% 0%

3 16% 13% 18%

4 42% 38% 45%

5 – very likely 11% 13% 9%

Average 3.11 3.13 3.09

Base 19 8 11

1001-3000employees


Total Manufacturing



1 – not at all likely 21% 33% 11% 0% 50%

2 11% 0% 22% 0% 0%

3 16% 33% 11% 33% 0%

4 42% 33% 33% 67% 50%

5 – very likely 11% 0% 22% 0% 0%

Average 3.11 2.67 3.33 3.67 2.50

Base 19 3 9 3 4

Financialservices



UK


Which core IT products/services do you think your business departments will be likely to commission and source outside of the IT department in the next two years?Other software (cloud-based or otherwise)

Total US




2 16% 20% 11%

3 26% 30% 22%

4 26% 30% 22%

5 – very likely 11% 0% 22%

Average 2.89 2.70 3.11

Base 19 10 9

Total




2 16% 38% 0%

3 26% 38% 18%

4 26% 13% 36%

5 – very likely 11% 13% 9%

Average 2.89 3.00 2.82

Base 19 8 11

1001-3000employees


Total Manufacturing



Financialservices



UK

1 – not at all likely 21% 33% 22% 0% 25%

2 16% 0% 22% 33% 0%

3 26% 67% 11% 33% 25%

4 26% 0% 22% 33% 50%

5 – very likely 11% 0% 22% 0% 0%

Average 2.89 2.33 3.00 3.00 3.00

Base 19 3 9 3 4


Which core IT products/services do you think your business departments will be likely to commission and source outside of the IT department in the next two years?Other XaaS cloud-based services

Total US




2 16% 20% 11%

3 21% 20% 22%

4 21% 10% 33%


Average 2.42 1.90 3.00

Base 19 10 9

Total




2 16% 38% 0%

3 21% 0% 36%

4 21% 25% 18%


Average 2.42 2.63 2.27

Base 19 8 11

1001-3000employees


Total Manufacturing



Financialservices



UK

1 – not at all likely 37% 0% 33% 100% 25%

2 16% 33% 22% 0% 0%

3 21% 33% 22% 0% 25%

4 21% 33% 11% 0% 50%

5 – very likely 5% 0% 11% 0% 0%

Average 2.42 3.00 2.44 1.00 3.00

Base 19 3 9 3 4


Which core IT products/services do you think your business departments will be likely to commission and source outside of the IT department in the next two years?Application development

Total US




2 21% 20% 22%

3 11% 20% 0%

4 37% 20% 56%


Average 2.74 2.20 3.33

Base 19 10 9

Total




2 21% 13% 27%

3 11% 13% 9%

4 37% 38% 36%


Average 2.74 3.00 2.55

Base 19 8 11

1001-3000employees


Total Manufacturing



Financialservices



UK

1 – not at all likely 26% 0% 11% 67% 50%

2 21% 33% 33% 0% 0%

3 11% 33% 11% 0% 0%

4 37% 33% 33% 33% 50%

5 – very likely 5% 0% 11% 0% 0%

Average 2.74 3.00 3.00 2.00 2.50

Base 19 3 9 3 4


Which core IT products/services do you think your business departments will be likely to commission and source outside of the IT department in the next two years?IT security software/hardware

Total US




2 16% 0% 33%

3 11% 10% 11%

4 16% 10% 22%

5 – very likely 11% 0% 22%

Average 2.26 1.50 3.11

Base 19 10 9

Total




2 16% 13% 18%

3 11% 25% 0%

4 16% 13% 18%

5 – very likely 11% 13% 9%

Average 2.26 2.50 2.09

Base 19 8 11

1001-3000employees


Total Manufacturing



Financialservices



UK

1 – not at all likely 47% 33% 44% 67% 50%

2 16% 0% 22% 0% 25%

3 11% 33% 0% 33% 0%

4 16% 33% 11% 0% 25%

5 – very likely 11% 0% 22% 0% 0%

Average 2.26 2.67 2.44 1.67 2.00

Base 19 3 9 3 4


Which core IT products/services do you think your business departments will be likely to commission and source outside of the IT department in the next two years?Devices for employees to use for work purposes (BYOD)

Total US




2 16% 30% 0%

3 16% 20% 11%

4 37% 30% 44%

5 – very likely 16% 10% 22%

Average 3.21 3.00 3.44

Base 19 10 9

Total




2 16% 25% 9%

3 16% 13% 18%

4 37% 25% 45%

5 – very likely 16% 25% 9%

Average 3.21 3.25 3.18

Base 19 8 11

1001-3000employees


Total Manufacturing



Financialservices



UK

1 – not at all likely 16% 0% 22% 0% 25%

2 16% 33% 11% 33% 0%

3 16% 33% 0% 33% 25%

4 37% 0% 56% 33% 25%

5 – very likely 16% 33% 11% 0% 25%

Average 3.21 3.33 3.22 3.00 3.25

Base 19 3 9 3 4


Which core IT products/services do you think your business departments will be likely to commission and source outside of the IT department in the next two years?Communications services of any kind

Total US




2 26% 40% 11%

3 21% 20% 22%

4 26% 20% 33%


Average 2.68 2.40 3.00

Base 19 10 9

Total




2 26% 38% 18%

3 21% 13% 27%

4 26% 25% 27%


Average 2.68 2.88 2.55

Base 19 8 11

1001-3000employees


Total Manufacturing



Financialservices



UK

1 – not at all likely 21% 0% 22% 33% 25%

2 26% 67% 11% 33% 25%

3 21% 0% 44% 0% 0%

4 26% 33% 11% 33% 50%

5 – very likely 5% 0% 11% 0% 0%

Average 2.68 2.67 2.78 2.33 2.75

Base 19 3 9 3 4


Thinking about the departments you mentioned and the products being sourced by them, are you able to say to what extent the IT department is typically involved?

Total US



The IT department is not involved at all in any of the departments practicing "shadow IT" 14% 9% 19%

The IT department is involved very little with the departments practicing "shadow IT" 32% 48% 20%

The IT department is involved more often than not in the departments practicing "shadow IT" 36% 36% 36%

The IT department is involved very often in the departments practicing "shadow IT" 17% 7% 26%

Base 155 69 86

Total



The IT department is not involved at all in any of the departments practicing "shadow IT" 14% 16% 13%

The IT department is involved very little with the departments practicing "shadow IT" 32% 31% 33%

The IT department is involved more often than not in the departments practicing "shadow IT" 36% 39% 33%

The IT department is involved very often in the departments practicing "shadow IT" 17% 14% 21%

Base 155 77 78

1001-3000employees


Total Manufacturing



The IT department is not involved at all in any of the departments practicing "shadow IT" 14% 0% 16% 22% 18%

The IT department is involved very little with the departments practicing "shadow IT" 32% 26% 42% 24% 36%

The IT department is involved more often than not in the departments practicing "shadow IT" 36% 57% 32% 32% 27%

The IT department is involved very often in the departments practicing "shadow IT" 17% 17% 11% 22% 20%

Base 155 35 38 37 45

Financialservices



UK


Thinking about the departments you mentioned and the products being sourced by them, are you able to say to what extent the IT department is typically involved?

Total US



The head of the department 41% 26% 53%

A technology workgroup comprising people across the department 39% 43% 36%

A dedicated technology person 10% 12% 8%

The employees 9% 17% 2%

*Other (please specify) 1% 1% 0%

Base 155 69 86

Total



The head of the department 41% 42% 41%

A technology workgroup comprising people across the department 39% 42% 37%

A dedicated technology person 10% 10% 9%

The employees 9% 5% 13%


Base 155 77 78

1001-3000employees


Total Manufacturing



The head of the department 41% 34% 42% 59% 31%

A technology workgroup comprising people across the department 39% 43% 42% 24% 47%

A dedicated technology person 10% 17% 8% 5% 9%

The employees 9% 6% 8% 8% 13%


Base 155 35 38 37 45

Financialservices



UK


How significant a risk does "shadow IT" pose to your organisation's IT security?

Total US


"Shadow IT" poses the most significant risk to our organisation's IT security 16% 8% 24%

"Shadow IT" poses an extremely significant risk to our organisation's IT security 33% 39% 27%

"Shadow IT" poses a risk to our organisation's IT security 36% 39% 33%

"Shadow IT" poses no risk to our organisation's IT security 15% 14% 16%

Base 200 100 100

Total






Base 200 101 99

1001-3000

employees

More than 3000

employees

Total Manufacturing


Shadow IT poses the most significant risk to our organisation's IT security 16% 6% 15% 24% 19%

Shadow IT poses an extremely significant risk to our organisation's IT security 33% 29% 39% 30% 33%

Shadow IT poses a risk to our organisation's IT security 36% 50% 30% 35% 31%

Shadow IT poses no risk to our organisation's IT security 15% 15% 17% 11% 17%

Base 200 48 54 46 52

Financial

services


and transport

Other commercial

sector

UK

Total"Shadow IT" is not

happening






Base 197 152 45

"Shadow IT" is

happening

Respondent country


UK 50% 49% 52%

US 50% 51% 48%

Base 200 101 99


Total UK US


Financialservices



UK 50% 54% 46% 52% 48%

US 50% 46% 54% 48% 52%

Base 200 48 54 46 52

How many employees does your organisation have?



1001-3000 employees 51% 49% 52%

More than 3000 employees 50% 51% 48%

Base 200 100 100

Total UK US


Financialservices



1001-3000 employees 51% 60% 46% 39% 56%

More than 3000 employees 50% 40% 54% 61% 44%

Base 200 48 54 46 52

Within which sector is your organisation?


Total US


Manufacturing 27% 25% 29%

Other commercial sector 26% 25% 27%

Financial services 24% 26% 22%

Retail, distribution and transport 23% 24% 22%

Base 200 100 100

Total


Manufacturing 27% 25% 29%

Other commercial sector 26% 29% 23%

Financial services 24% 29% 19%

Retail, distribution and transport 23% 18% 28%

Base 200 101 99

1001-3000employees


UK

Vanson Bourne Data Summary: Shadow IT - IT Decision-Makers

Technology

departments page

organisations departments

use of shadow

business departments

organisation page

departments control

years page

period page