The influence of Shadow Information Technology on the cyber security of business entity

Abstract

The development of information technology over the past decades has led to radical changes in all the spheres of human, social and state activity: new cultural and economic trends appear, the production of information as an independent product develop, new types of social communications emerge. In this connection the information sphere of any state becomes critical and therefore needs to be protected. Particularly urgent is the issue of information security. That is why scientists actively research the issues related to a set of measures aimed at ensuring the security of information from unauthorized access, as well as studying methods and tools that ensure the integrity, confidentiality and availability of information under the influence of any threats, the realization of which can cause damage to the owners and users of information. Information security has become an integral part of national security and at the same time an important independent sphere of ensuring the safety of business entities. Nowadays the information space, infrastructure and technologies considerably influence the level and rate of social, economic and technological development. Therefore, the success of the business entity, the guarantee of profit, becomes more and more dependent on keeping production secrets, based on the intellectual potential and specific technology. Employees store data on mobile or wearable devices – and important corporate information becomes available from any laptop, smartphone or tablet that an employee uses at the office or cafe. In the paper the analysis of threat that becomes extremely urgent in the information sphere and is connected with the use of mobile or wearable devices at the workplace is performed. The definition of Shadow IT or Stealth IT is developed and the structure of possible places of the emergence of the corresponding threat is given. The suggestions on improving the operation of corporate information security units in counteracting unauthorized access to information resources are offered.