The marketing department set up its own project management software without telling the appropriate departments. Which of the following describes this scenario?

Shadow IT refers to IT systems, devices, software, and services used within an organization without explicit organizational approval or knowledge from the IT department. In this scenario, the marketing department independently deploying project management software perfectly illustrates Shadow IT. This practice can introduce security vulnerabilities, compliance risks, and integration challenges. An insider threat involves a malicious actor within the organization; while Shadow IT can create vulnerabilities an insider might exploit, the act itself isn't necessarily malicious. Data exfiltration is the unauthorized transfer of data out of an organization. Service disruption implies an interruption of normal operations.