The important thing to remember is your company IT dept. still has to maintain some degree of control over the applications used and where sensitive data is stored. Unfortunately, many users just download apps or start using unsanctioned services, though, and introduce security risks through “shadow IT. or "Shadow Cyber IT”