When is Shadow IT a Problem?

If a CISO doesn’t have a Shadow IT plan in place, then Shadow IT is definitely a problem.