Maria Korneeva\/Moment\/Getty Images<\/p>\n
Shadow AI is rapidly becoming a massive issue for organizations. Research suggests 45% of employees used unsanctioned AI tools in the previous 30 days, and 36% used confidential data alongside these services<\/p>\n
Tal Carmi, CIO at technology specialist WalkMe, whose firm published its State of Digital Adoption 2026 report based on a global survey of 3,750 professionals, told ZDNET that the research shows shadow AI is often a symptom of a wider adoption problem: staff bypass sanctioned tools if they are difficult to use, do not fit naturally into existing workflows, or fail to help them get work done<\/p>\n
Also: Just 13% of professionals are confident using AI \u2013 how top companies solve this skills gap<\/strong><\/p>\n \u201cUsually, it\u2019s not for malicious reasons,\u201d he said, referring to why professionals use unsanctioned AI tools<\/p>\n \u201cIt\u2019s because<\/a> they found a tool that does something and it\u2019s better than whatever services the company provides. If they can\u2019t find the sweet spot, people go where they can. And I think some of that approach is due to a lack of education.\u201d<\/p>\n His firm\u2019s research backs up Carmi\u2019s assertion: 34% of professionals did not know which AI tools their employer had approved, and only 21% had been warned about their employer\u2019s AI policies<\/p>\n However, while professionals might use unsanctioned AI tools unwittingly or with the best of intentions, their errant actions can have serious consequences for their organizations<\/p>\n Sensitive data can leak through tightly secured enterprise firewalls. Professionals\u2019 unsanctioned use of AI services can also put businesses at risk of breaking rules and regulations, with potentially huge financial penalties<\/p>\n Take the updated EU AI Act and Article 50, which\u00a0introduces new transparency obligations. Companies that fail to comply could receive fines of\u00a0\u20ac15 million, or 3% of total worldwide annual turnover<\/p>\n Also:\u00a0Why replacing staff with AI backfires \u2013 and 5 ways smart leaders generate real value instead<\/strong><\/p>\n Carmi said the risk of shadow AI means bosses and professionals must maintain an uneasy balance between enabling and constraining emerging technologies<\/p>\n \u201cThe easy thing would be to give the user an unrestricted toolset, which would be great for the employee, but horrible for the company and the CISO,\u201d he said<\/p>\n \u201cThe best approach for the CISO is a completely highly controlled, very limited toolset, which would be horrible for the employee.\u201d<\/p>\n So, how can companies get the right balance? Business leaders said managing shadow AI relies on two key approaches: letting people play and establishing acceptable guidelines<\/p>\n Kirsty Roth, chief operating officer at Thomson Reuters, told ZDNET that finding the balance in her organization relies on a careful strategy, one that doesn\u2019t prevent people from exploring AI before the constraints are put in place<\/p>\n \u201cThe best people in your organization are curious when new things come out,\u201d she said. \u201cAnd whether it\u2019s a new ChatGPT model or a new service from Claude, people want to go and play with it.\u201d<\/p>\n Also:\u00a0\u2018Specialists aren\u2019t required\u2019: How to stay valuable in an AI agent workplace today<\/strong><\/p>\n Roth recognized some of these explorations will be unsanctioned. Her own firm\u2019s 2026 Future of Professionals Report found a third of lawyers, accountants, and compliance professionals use AI tools their organization has not approved, rising to 41% among those who say their firm is moving too slowly on AI<\/p>\n However, while she acknowledged that unsanctioned use of AI tools can land a business in hot water, she also said that it\u2019s difficult to constrain people until you understand the value of the services that they\u2019re eager to exploit<\/p>\n At Thomson Reuters, her wait-and-see strategy gave people some wiggle room to explore AI<\/p>\n \u201cEarly on, we just tracked AI,\u201d she said. \u201cWe didn\u2019t stop it. We made sure we knew where they were going. We knew if we tried to block it, they\u2019d probably do other things that are potentially worse, like move company data onto a personal device.\u201d<\/p>\n Also:\u00a0Companies embracing AI the most are hiring more people \u2013 including entry-level<\/strong><\/p>\n \u201cWe worked with the teams to say, \u2018Right, we\u2019ve got you proper access. We\u2019d like you to switch to this service,\u2019 and made sure we understood what they were using, and then quickly gave them the same things, but in an authorized channel where it was within our sandbox, the data wasn\u2019t going anywhere, and the information around the company IP couldn\u2019t be exposed.\u201d<\/p>\n Roth said Thomson Reuters benefits from sophisticated cyber capabilities that show when people are moving information in or out. She advised other business leaders to proceed with care and establish a strategy that ensures their business doesn\u2019t risk missing out on the potential competitive advantages that employee explorations into AI can bring<\/p>\n \u201cEarly on, you could see people trying to use things because they were curious, and I think probably the art is to find a way to go with that and give them what they want versus being overly prescriptive and just find out that people are doing things in the wrong way.\u201d<\/p>\n WalkMe\u2019s Carmi agreed that it\u2019s essential for business leaders to create visibility into which AI tools employees use, what information they share, and how people rely on AI in their day-to-day work<\/p>\n Also:\u00a0AI is getting better at your job, but you have time to adjust<\/p>\n Without<\/a> that understanding, organizations can\u2019t govern AI use effectively or demonstrate responsible practice<\/p>\n \u201cI think success is about enablement and knowledge transfer. If they are using a tool, or they\u2019re thinking about using it, try to understand why. Do you have a solution for them? Do you have something else that works?\u201d he said<\/p>\n \u201cBecause if you get them an AI tool that gives them 80% of the value, but is completely sanctioned, I think most people will say, \u2018Okay, I\u2019ll use it,\u2019 especially once you make them aware that unsanctioned use is an actual risk to themselves and their companies.\u201d<\/p>\n Like Carmi, Gill Haus, CIO at Chase, told ZDNET it\u2019s crucial to recognize that very few people will use unsanctioned tools maliciously<\/p>\n \u201cI don\u2019t know if I\u2019d call it shadow AI because \u2018shadow\u2019 implies that someone\u2019s off in the corner doing something we don\u2019t want them to do,\u201d he said<\/p>\n Also:\u00a0The new enterprise AI expert every company needs \u2013 and why<\/strong><\/p>\n Haus said his organization\u2019s AI controls are embedded in LLM Suite, Chase\u2019s internal agentic platform that staff can use to ask questions, review documents, and create specifications<\/p>\n LLM Suite was released in summer 2024 and provides access to large language models (LLMs) in a secure environment. This approach means Chase employees, both in the IT department and across the wider business, can try things with confidence and know they\u2019re not breaking any rules<\/p>\n \u201cWe want people to be using the technology to learn,\u201d he said. \u201cEverything goes through our trusted secure pipeline, meaning there isn\u2019t a shadow.\u201d<\/p>\n Also:\u00a0AI agents are your new colleagues \u2013 how to get the best results<\/strong><\/p>\n Haus advised other business leaders and their professionals to establish similar AI guidelines<\/p>\n \u201cCompanies need to put thought into how to release these technologies because they are very powerful, and there\u2019s lots of hype,\u201d he said<\/p>\n \u201cDoing AI in a controlled, responsible way is the only way that we would do it. I believe it\u2019s also the only way for other companies. Then, when people are using AI, you have confidence that if, for some reason, they make a mistake and do something wrong, you\u2019re still in control.\u201d<\/p>\n \n Related:<\/strong> \n Join Justfine Infotech<\/strong> and build real digital skills in AI, automation, web development, digital marketing, office productivity, e-commerce, freelancing and cybersecurity<\/a>.<\/p>\n Available Programmes:<\/strong> WhatsApp:<\/strong>
\n
\n Digital Automation Training Benin: 5 Winning Skills Employers Demand in 2026
\n <\/a>\n <\/p>\n
\n WhatsApp Marketing Automation Africa: 6 Dangerous Mistakes Brands Make in Nigeria
\n <\/a>\n <\/p>\n<\/div>\nWant to learn this practically?<\/h3>\n
\n 6 Weeks Certificate \u2022 3 Months Professional Certificate \u2022 6 Months Diploma \u2022 Full Professional Diploma<\/p>\n
\n +229 01 57 57 99 15
\n +229 01 66 68 11 60<\/p>\n