Along with the rise of the Internet, more and more software providers offer SaaS services in the evolution process from Web2.0 to Html5.0 to support the users' usage of the Internet, bringing convenience but causing the risks of Shadow IT.

Shadow IT: All applications not involving IT organizations and applications not covered by IT service management are all in the scope of Shadow IT.

Shadow IT brings in potential risks and costs. Hundreds of Cloud applications may be operated in the large enterprise network, where most are shadow services. These services are not supervised, and they might cause significant risks to data and business compliance issues.

How to handle Shadow IT becomes a problem to be solved in the aspect of enterprise information security:

• How to inspect and evaluate the usage of SaaS applications.

• How to discover and handle potential Shadow IT risks.

• How to manage SaaS applications.

Please refer to How to manage SaaS applications. [LCH7][8]