License Compliance and Shadow IT
What are some best practices in how companies handle the SW license compliance issue for shadow IT (apps being procured and run outside of core IT)? Seems like the alternatives are: 1) Centralized IT control… highest level of control by experts with the tools and processes to manage 2) Decentralized control … Business depts with shadow IT must acknowledge accountability and create tools and processes to control the usage.
Any others? What is your sense of what best-in-class companies are doing?