Anyone with a credit card and an internet connection can line up a cloud-based solution designed specifically for their team or their line of business—and many are doing so with no regard for security. Who should be responsible if something goes wrong?“Many IT decisions are now distributed throughout the organization at the line-of-business level. From a security point of view, it’s a nightmare scenario,” says Larry Ponemon, founder of the Ponemon Institute, a technology research firm.
Executives say they are having a hard time keeping up with the explosion of unsanctioned devices, applications and software. Most organizations run more than 100 different applications, some as many as 1,000. But that number may be only a guess.
When business units can get whatever they need without the knowledge or approval of the IT team, it’s hard to maintain an effective cybersecurity program across the organization. This has played out first with the bring-your-own-device challenge in the smartphone era, then with the Internet of Things and cloud services.
“There is always a tension between enterprise control and business unit flexibility,” says James Kaplan, partner and co-leader of IT infrastructure and cybersecurity at McKinsey. Many organizations have figured out either how to create effective enterprise utilities or how to create a high degree of scale and professionalism in each business unit.
IBM_ITServices Cant see my dick definitely dont protect it