@inproceedings{KopperWestner, author = {Kopper, Andreas and Westner, Markus}, title = {Deriving a Framework for Causes, Consequences, and Governance of Shadow IT from Literature}, series = {Proceedings zur Multikonferenz Wirtschaftsinformatik 2016 (MKWI 2016), Technische Universit{\"a}t Ilmenau, Th{\"u}ringen, 09.-11. M{\"a}rz 2016}, booktitle = {Proceedings zur Multikonferenz Wirtschaftsinformatik 2016 (MKWI 2016), Technische Universit{\"a}t Ilmenau, Th{\"u}ringen, 09.-11. M{\"a}rz 2016}, pages = {1687 -- 1698}, abstract = {Shadow IT is a widespread phenomenon which includes systems, services, and processes that are not part of the "official" corporate IT. The topic is still an emerging research area and slowly gaining traction in recent years but a state of the art analysis is missing to date. We therefore conduct a structured literature review to derive a framework for causes, consequences, and governance of Shadow IT. We identify motivators, enablers, and missing barriers as causes for Shadow IT, both positive and negative consequences on an organizational and a technical level and governance approaches which focus on clearance of existing or prevention of future Shadow IT. Our review reveals that constructivist, qualitative design using a case study approach dominates existing research. There are no dominant theories yet to explain Shadow IT. We also highlight possibilities for future research to focus on the less explored governance aspect.}, subject = {Informationsmanagement}, language = {en} } @article{KopperWestnerStrahringer, author = {Kopper, Andreas and Westner, Markus and Strahringer, Susanne}, title = {From Shadow IT to Business-managed IT: A qualitative comparative analysis to determine configurations for successful management of IT by business entities}, series = {Information Systems and e-Business Management}, volume = {18}, journal = {Information Systems and e-Business Management}, number = {2}, doi = {10.1007/s10257-020-00472-6}, pages = {209 -- 257}, abstract = {Shadow IT describes covert/hidden IT systems that are managed by business entities themselves. Additionally, there are also overt forms in practice, so-called Business-managed IT, which share most of the characteristics of Shadow IT. To better understand this phenomenon, we interviewed 29 executive IT managers about positive and negative cases of Shadow IT and Business-managed IT. By applying qualitative comparative analysis (QCA), we derived four conditions that characterize these cases: Aligned, local, simple, and volatile. The results show that there are three sufficient configurations of conditions that lead to a positive outcome; one of them even encompasses Shadow IT. The most important solution indicates that IT systems managed by business entities are viewed as being positive if they are aligned with the IT department and limited to local requirements. This allows to balance local responsiveness to changing requirements and global standardization. In contrast, IT systems that are not aligned and permanent (and either organization-wide or simple) are consistently considered as negative. Our study is the first empirical quantitative-qualitative study to shed light on the success and failure of Shadow IT and Business-managed IT.}, subject = {Informationsmanagement}, language = {en} } @article{KopperKlotzWestneretal., author = {Kopper, Andreas and Klotz, Stefan and Westner, Markus and Strahringer, Susanne}, title = {Shadow IT and Business-managed IT}, series = {Journal of Information Technology Management (JITM)}, volume = {30}, journal = {Journal of Information Technology Management (JITM)}, number = {4}, issn = {1042-1319}, pages = {25}, abstract = {Two concepts describe the autonomous deployment of IT by business entities: Shadow IT and Business-managed IT. Shadow IT is deployed covertly, that is, software, hardware, or IT services created/procured or managed by business entities without alignment with the IT organization. In contrast, Business-managed IT describes the overt deployment of IT, that is, in alignment with the IT organization or in a split responsibility model. The purpose of this paper is to extend the conceptual understanding of Shadow IT and Business-managed IT, comparing the perceptions of 29 CIOs and senior IT managers with the results of a systematic literature review. By doing so, this paper presents a structured and comprehensive view of causing factors, outcomes, and governance of Shadow IT and Business-managed IT in practice. A comparison of academic literature and practitioner perceptions reveals the limitations and gaps of the current research and highlights avenues for future research. The authors find three category-spanning themes occurring as causing factors, outcomes, and—as part of governance measures—factors to improve the IT organization: (1) (Poor) business-IT alignment (2) (lack of) agility, and (3) (lack of) policies. This study is innovative with its comprehensive qualitative interview data that the authors compare to the existing literature. Therefore, the paper brings together theoretical and practical insights into Shadow IT and Businessmanaged IT, which should aid practitioners and scholars in decision making and future research.}, subject = {Corporate Governance}, language = {en} }