Certificate of Cloud Auditing Knowledge (CCAK) — Question 232

A business unit introducing cloud technologies to the organization without the knowledge or approval of the appropriate governance function is an example of:

Answer options

• A. IT exception.
• B. threat.
• C. shadow IT.
• D. vulnerability.

Correct answer: C

Explanation

The correct answer is C, shadow IT, which refers to technology solutions used within an organization without official approval. Options A (IT exception), B (threat), and D (vulnerability) do not accurately describe the unauthorized use of cloud technologies by a business unit.