University Archives - EasySAM

How to proactively manage shadow IT

Mike Varney — Fri, 23 Apr 2021 15:31:00 +0000

University

Find out more below

University

Universities can reduce and secure shadow IT without impeding productivity.

Published on 23rd April 2021

Shadow IT, the practice of using applications and systems without the explicit approval or knowledge of IT staff, is a growing challenge in higher education. The pandemic has accelerated cloud adoption not only at the enterprise level but also at the user level, increasing the likelihood that shadow IT will proliferate.

The Everest Group reported in 2019 that the cost of dismantling shadow IT accounted for 50 percent or more of IT spending in large enterprises. And shadow IT is as much a problem in higher education as in other industries — perhaps even more so, given the diversity of higher education user groups and its relatively open IT environment.

Shadow IT Can Be a Slippery Slope

Shadow IT grows because of a lack of awareness, both on the part of users and the IT department. A wide variety of tools are brought into institutions under the radar, without explicit IT approval or knowledge.

A user needs something to get the job done and, without thinking, signs up for a web-based application: Need online messaging? Why not the same WhatsApp you use for your personal life? Want to do a VoIP or videoconference call? If you don’t love the videoconference solution your institution offers, why not just use the free version of Zoom you use at home? Need to transmit large files? It’s easy to sign up for a Dropbox account, particularly when you’re trying to get the job done remotely.

But in none of these scenarios is any thought given to control, management or security. Self-reliance is often a virtue, but not when it puts the university at risk.

The IT department may be blind to the issue, with no clue about how many unauthorized apps are being used, particularly when those applications are connecting from a home office.

It’s often unclear what security protections the applications are using, and frequent reuse of login credentials, weak passwords and phishing attacks leave user accounts on unauthorized services vulnerable.

With shadow IT, there is also the problem of application confusion and oversaturation. It’s messy when people are deciding for themselves which messaging application or file-sharing service to use.

How to Protect Against Unauthorized Access

Unauthorized software may not meet the security standards required by the institution. There are several categories of risk that need to be considered:

Data protection issues: Where is the data being stored? How is it protected? Can the user upload sensitive data to the cloud, where it could be leaked? Is data encrypted? Who controls the encryption keys? Can the user download files that contain malware and spread them to other members of the team?
Compliance: The university’s compliance efforts may be squandered if the actual state of software is unknown. Will use of the service put the institution in conflict with industry regulations or even laws?
Software asset management: Licenses procured without IT knowledge expose the institution to risk, potentially with severe sanctions. How do unknown applications and data relationships affect the carefully populated configuration management database?

How to Develop Proactive Prevention

Fortunately, the sea of shadow IT is not as murky as it may seem. The best approach involves five steps:

Establish a baseline of acceptable applications. Recognize there are probably many instances of shadow IT in your institution, most of which use well-known tools such as mail, messaging, conferencing and large file transfer services. Focus on the most popular ones and determine if you can sanction a subset of them.
Clarify the policy. Establish a clear policy on which devices, systems and software your faculty, staff and students can use. Communicate that policy to all users — not just once, but often. Remember that consistent user education strengthens your first line of defence.
Gain visibility. Detect and catalog all software running in the organization by using a software asset management solution, such as an asset management suite. This can integrate compliance, license entitlement, discovery and more in one interface.
Triage unacceptable risk. Conduct a detailed analysis of the risks associated with unauthorized applications. A cloud access security broker, such as McAfee MVISION, ensures real-time data protection. For tighter control with virtual desktop infrastructure tools such as Citrix XenDesktop, let IT control a secure desktop image with only sanctioned applications.
Create a long-term plan to fill functionality gaps. Run strategic analysis of usage patterns. Recognize that the institution needs a full range of tools and services to function properly.

Students, faculty and staff are constantly trying to work as efficiently as possible, particularly when they are doing so away from campus. It’s up to IT to provide them with secure solutions that make this easier.

Shadow IT is a problem, but it serves one good purpose: It provides a view of what capabilities users really need, while software asset management, virtual desktop infrastructure and cloud access security brokers can help IT exercise control and governance over the entire landscape of applications. As always, user education plays a key role.

Source

https://edtechmagazine.com/higher/article/2021/03/how-proactively-manage-shadow-it

Image Credit

Thom via Unsplash

Search

UK begins antitrust inquiry into Microsoft’s business software ecosystem

The regulator has ‘heard’ customers can’t always ‘effectively combine software from Microsoft with that of other providers’.

Quit VMware and you’ll emerge with more complex and less capable infrastructure

That’s the view of one Gartner analyst, who says modernising applications is probably a better use of your time than hypervisor migration.

SAP’s AI offer to legacy customers comes with a catch

On-premises customers can access Joule assistants, but only if they commit 50% of maintenance spend to cloud first.

Valuemaxxing: why it matters and how leaders can master it

AI is reshaping business fast. Learn how “valuemaxxing” helps leaders align ROI, governance, and FinOps to maximise technology investments.

Follow and Subscribe

The post How to proactively manage shadow IT appeared first on EasySAM.

Top companies are hiring more candidates without a 4 year degree

Mike Varney — Wed, 06 Jan 2021 08:30:00 +0000

University

Find out more below

University

Elon Musk said a college degree isn’t required for a job at Tesla. And Apple, Google, and Netflix don’t require employees to have 4-year degrees either.

Published on 6th January 2021

Students assume getting a four-year degree — and taking on the thousands of dollars of student-loan debt that comes along with it — is the only way to get your foot in the door at top companies such as Tesla, Apple, and Netflix.

But that isn’t always true. Even the CEO of Tesla doesn’t think you need it.

Tesla CEO Elon Musk said colleges “are not for learning,” but rather a place to have fun, during a conversation at the Satellite 2020 conference earlier this year. Musk said you can learn anything online for free, and noted that billionaire moguls like Bill Gates and Oracle’s Larry Ellison dropped out of college. Ideally, he added, you would have dropped out of school “and did something.”

Musk joined prominent business leaders who have also questioned the need for four-year degrees, such as Apple CEO Tim Cook and Siemens USA CEO Barbara Humpton. Cook said in 2019 that about half of Apple’s US employment last year included people without four-year degrees. Cook reasoned that many colleges do not teach the skills that business leaders need most in their workforce, such as coding.

Humpton also dismissed the idea that a four-year degree guarantees career-readiness: “All too often, job requisitions will say they require a four-year degree, when in fact there’s nothing about the job that truly requires a four-year degree — it merely helped our hiring managers sort of weed through the crowd and get a smaller qualified candidate group,” Humpton said at the White House in 2019.

You don’t need an Ivy League diploma to get a job at Apple or Tesla — but you would get paid more on average if you had one

Now, prominent companies such as Google and Apple are hiring employees who have the skills required to get jobs done, with or without a degree. Glassdoor found firms like Google, Apple, and IBM don’t require a college degree to land a job. Google recently launched a new selection of courses for Google Career Certificate, a six-month program that prepare participants for in-demand jobs.

That being said, college degrees seem to pay off. Workers that hold at least a bachelor’s degree earned $502 more in median weekly earnings than those with just a high school education, according to a May 2020 report from the US Bureau of Labor Statistics. Additionally, the unemployment rate among those with less than a high school degree is more than double that of bachelors degree holders.

But because degrees often require taking on student debt, many Americans cannot afford college degrees. Only 42% of high-school sophomores go on to earn a two-year or four-year degree, per the US Department of Education. Even among students who graduate from college, a significant number of new graduates are underemployed, meaning they work jobs that don’t require a college degree.

As many expect automation to displace a quarter of the workforce, experts and researchers are already tossing around alternatives to help prepare young employees for work. Apprenticeship programs, which mix school and on-the-job training, could better prepare the workforce of the future, Business Insider reporter Rich Feloni reported.

“I don’t consider going to college evidence of exceptional ability,” Musk said at the Satellite conference. “Did Shakespeare even go to college? Probably not.”

Source

https://www.businessinsider.com/top-companies-are-hiring-more-candidates-without-a-4-year-degree-2019-4

Image Credit

Pixabay via Pexels

Follow and Subscribe

The post Top companies are hiring more candidates without a 4 year degree appeared first on EasySAM.