Monetary Authority of Singapore Technology Risk Management Guidelines 6.5: 6.5 Management of End User Computing and Applications

End user computing and shadow IT (hardware, software and services not managed by the IT department) raise the risk of data leakage and malware and should be managed as information assets. The FI should control and monitor the use of shadow IT, and assess the risk of end-user developed or acquired applications, implement controls for identified risks, obtain approval before use and test the applications properly before deployment.