Rethinking Shadow IT: From Risk to Signal in Higher Education
Shadow IT is often framed as a problem to be controlled, governed, or eliminated. But what if its presence is telling us something? This poster reframes shadow IT as a signal, not simply of unmanaged technology risk, but of underlying institutional conditions such as unmet needs, procurement friction, capacity constraints, timing, trust, and innovation. Grounded in doctoral research on shadow IT risk management in higher education, the poster connects three findings, Risk is Relational, Governance is Cultural, and Use is Contextual, to a practical approach for responding when shadow IT is detected. Rather than beginning with “How do we stop it?”, the framework asks “What is this signaling?” and moves through five steps: Detect, Listen, Interpret, Assess, and Respond. The goal is not to excuse unmanaged risk, but to understand the conditions behind it so institutions can make better risk decisions, strengthen relationships, and close the gaps that contribute to shadow IT in the first place.
Presenters
-
Joel Larson
Director of IT Support, Network Svcs, & Disaster Rcvy,
Kalamazoo Valley Community College
Resources & Downloads
-
Rethinking Shadow IT Poster
Updated on 9/23/2026