Exam CCAK topic 1 question 237 discussion

B. A weakness in the cloud compliance posture From an auditor's perspective, shadow IT represents a weakness in the cloud compliance posture. Shadow IT refers to the use of IT systems, software, and services without explicit organizational approval, often bypassing established security and compliance controls. This unauthorized use can lead to security vulnerabilities, data breaches, and non-compliance with regulatory requirements, as these unsanctioned systems might not adhere to the organization's security policies and standards. Therefore, shadow IT is viewed as a compliance risk that needs to be addressed to ensure proper governance and security.