ClusterSeven Shadow IT Manager is an End User Computing (EUC) governance and Model Risk Management (MRM) product that, as its name suggests, aims to address the issue of shadow IT (which is to say, important business computing assets, such as spreadsheets, that are not centrally managed or governed) which looms large over many businesses, whether they know it or not.
To wit, Mitratech estimates that the average enterprise contains 4-10 times as many shadow IT applications (including such things as spreadsheets) as corporate-managed apps. This is a problem, since (among other things) it is very easy for ungoverned applications and assets to unduly expose sensitive information, undermining any holistic attempt at governance or regulatory compliance. Hence, ClusterSeven helps you to find, understand, manage and monitor EUC apps and assets that currently reside under the banner of shadow IT. In this way, the transparency and control it provides enables you to demonstrate compliance with various applicable regulatory standards. Centralised, automated reporting is also available to ensure that these controls are provably consistent across your entire enterprise.
Moreover, an important, but often poorly grasped, part of modern regulatory compliance is the need to understand the relationships between your assets that are already centrally governed and monitored on the one hand, and your assets that remain in the wild on the other. Understanding these relationships requires robust data lineage, which ClusterSeven provides.
ClusterSeven is underpinned by enterprise-grade workflow automation that forms a standalone solution in its own right. Its APIs mean it can also be deployed alongside the rest of Mitratech’s broad-reaching, enterprise-ready GRC product suite, or pass EUC information to other GRC or data management solutions. Other relevant Mitratech products include, among other things, PolicyHub, for automated and easy-to-use policy management, and Alyne, a cloud-native, AI-enabled GRC platform.
“IMS is an extremely powerful tool that has enabled us to gather information in a standardised way and attribute ownership of each spreadsheet and EUC to designated individuals. Ownership of EUCs is instrumental to achieving a controlled environment.”
“ClusterSeven has has highlighted the challenge of manually managing spreadsheets, but more crucially brought to light the risk that poor control of change management can be to the Bank’s risk and finance functions.”