@article{KopperKlotzWestneretal., author = {Kopper, Andreas and Klotz, Stefan and Westner, Markus and Strahringer, Susanne}, title = {Shadow IT and Business-managed IT}, series = {Journal of Information Technology Management (JITM)}, volume = {30}, journal = {Journal of Information Technology Management (JITM)}, number = {4}, issn = {1042-1319}, pages = {25}, abstract = {Two concepts describe the autonomous deployment of IT by business entities: Shadow IT and Business-managed IT. Shadow IT is deployed covertly, that is, software, hardware, or IT services created/procured or managed by business entities without alignment with the IT organization. In contrast, Business-managed IT describes the overt deployment of IT, that is, in alignment with the IT organization or in a split responsibility model. The purpose of this paper is to extend the conceptual understanding of Shadow IT and Business-managed IT, comparing the perceptions of 29 CIOs and senior IT managers with the results of a systematic literature review. By doing so, this paper presents a structured and comprehensive view of causing factors, outcomes, and governance of Shadow IT and Business-managed IT in practice. A comparison of academic literature and practitioner perceptions reveals the limitations and gaps of the current research and highlights avenues for future research. The authors find three category-spanning themes occurring as causing factors, outcomes, and—as part of governance measures—factors to improve the IT organization: (1) (Poor) business-IT alignment (2) (lack of) agility, and (3) (lack of) policies. This study is innovative with its comprehensive qualitative interview data that the authors compare to the existing literature. Therefore, the paper brings together theoretical and practical insights into Shadow IT and Businessmanaged IT, which should aid practitioners and scholars in decision making and future research.}, subject = {Corporate Governance}, language = {en} } @inproceedings{KopperWestner, author = {Kopper, Andreas and Westner, Markus}, title = {Deriving a Framework for Causes, Consequences, and Governance of Shadow IT from Literature}, series = {Proceedings zur Multikonferenz Wirtschaftsinformatik 2016 (MKWI 2016), Technische Universit{\"a}t Ilmenau, Th{\"u}ringen, 09.-11. M{\"a}rz 2016}, booktitle = {Proceedings zur Multikonferenz Wirtschaftsinformatik 2016 (MKWI 2016), Technische Universit{\"a}t Ilmenau, Th{\"u}ringen, 09.-11. M{\"a}rz 2016}, pages = {1687 -- 1698}, abstract = {Shadow IT is a widespread phenomenon which includes systems, services, and processes that are not part of the "official" corporate IT. The topic is still an emerging research area and slowly gaining traction in recent years but a state of the art analysis is missing to date. We therefore conduct a structured literature review to derive a framework for causes, consequences, and governance of Shadow IT. We identify motivators, enablers, and missing barriers as causes for Shadow IT, both positive and negative consequences on an organizational and a technical level and governance approaches which focus on clearance of existing or prevention of future Shadow IT. Our review reveals that constructivist, qualitative design using a case study approach dominates existing research. There are no dominant theories yet to explain Shadow IT. We also highlight possibilities for future research to focus on the less explored governance aspect.}, subject = {Informationsmanagement}, language = {en} } @article{KopperWestnerStrahringer, author = {Kopper, Andreas and Westner, Markus and Strahringer, Susanne}, title = {Kontrollierte Nutzung von Schatten-IT}, series = {HMD Praxis der Wirtschaftsinformatik}, volume = {54}, journal = {HMD Praxis der Wirtschaftsinformatik}, publisher = {Springer}, doi = {10.1365/s40702-016-0286-x}, pages = {97 -- 110}, abstract = {Basierend auf einer systematischen und umfangreichen Analyse von Praxisbeitr{\"a}gen zum Thema Schatten-IT, die zwischen September 2015 und August 2016 erschienen sind, beschreibt der vorliegende Artikel Governance-Aspekte zu diesem Ph{\"a}nomen. Er erg{\"a}nzt damit vorhergehende akademische Studien. Es zeigt sich, dass unter Praktikern der Eindruck vorherrscht, dass IT-Abteilungen unter zunehmendem Druck stehen, schneller auf sich {\"a}ndernde Anforderungen aus den Fachbereichen reagieren zu m{\"u}ssen. K{\"o}nnen IT-Abteilungen diesen Erwartungen nicht entsprechen, beschaffen sich Fachbereiche und Nutzer selbst L{\"o}sungen in Form von Schatten-IT. Als m{\"o}gliche Antwort darauf kann sich die IT-Abteilung agiler organisieren und die IT-Architektur im Unternehmen modernisieren. Eine weitere M{\"o}glichkeit besteht darin, sich das innovative Potenzial von Schatten-IT zunutze zu machen und deren Umsetzung aktiv durch organisatorische und technische Maßnahmen zu unterst{\"u}tzen. IT-Sicherheitsmanagement und technische Schutzmechanismen k{\"o}nnen helfen, die so entstandenen L{\"o}sungen abzusichern und die Risiken zu minimieren. Nach vorherrschender Ansicht entwickelt sich die IT-Abteilung als Konsequenz aus all diesen Maßnahmen zu einem nutzerorientierten, internen Service-Provider und strategischen Partner f{\"u}r die Fachbereiche.}, subject = {IT-Abteilung}, language = {de} }