{"id":24621,"date":"2026-09-22T20:22:36","date_gmt":"2026-09-22T18:22:36","guid":{"rendered":"https:\/\/netsurit.com\/en-za\/?p=24621"},"modified":"2026-09-22T20:41:15","modified_gmt":"2026-09-22T18:41:15","slug":"shadow-ai-governance-plan","status":"publish","type":"post","link":"https:\/\/netsurit.com\/en-za\/shadow-ai-governance-plan\/","title":{"rendered":"Shadow AI Is a Demand Signal: What Leaders Should Do"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"24621\" class=\"elementor elementor-24621\" data-elementor-post-type=\"post\">\n\t\t\t\t<div class=\"elementor-element elementor-element-83d1318 e-flex e-con-boxed e-con e-parent\" data-id=\"83d1318\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-fa3d102 elementor-widget elementor-widget-html\" data-id=\"fa3d102\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"html.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\n\n<article class=\"netsurit-shadow-article\">\n  <div class=\"ns-article-shell\">\n    <header>\n      <div class=\"ns-byline\">\n        <span>By <strong>Dr Jan van Niekerk<\/strong>, SVP, Data &amp; AI Strategy, Netsurit<\/span>\n        <time datetime=\"2026-09-20\">20 September 2026<\/time>\n      <\/div>\n\n      <p class=\"ns-lead\">Shadow AI, meaning employees using AI tools that IT never approved or does not know about, is already the norm in most organisations, not the exception. It is happening at the top of the organisation chart as much as at the bottom.<\/p>\n    <\/header>\n\n    <p>A steering committee I sat with was 40 minutes into drafting a stricter Shadow AI policy when the CIO said the quiet part out loud:<\/p>\n\n    <blockquote>\n      <p>\u201cYou all know we are describing ourselves.\u201d<\/p>\n    <\/blockquote>\n\n    <p>Nobody disagreed. The meeting became more useful after that. It is a pattern we have seen before: <a href=\"https:\/\/netsurit.com\/en-za\/are-your-employees-using-ai-without-you-knowing\/\">employees using AI without approval<\/a> almost always turns out to be widespread once anyone actually looks.<\/p>\n\n    <aside class=\"ns-resource\" aria-label=\"Shadow AI governance whitepaper\">\n      <div class=\"ns-resource-copy\">\n        <h3>See the complete Shadow AI governance framework<\/h3>\n        <p>Explore the risks, controls and practical steps in Netsurit's Shadow AI governance whitepaper.<\/p>\n      <\/div>\n      <a class=\"ns-resource-link\" href=\"https:\/\/za.netsurit.com\/whitepapers\/shadow-ai-governance\">Read the whitepaper \u2192<\/a>\n    <\/aside>\n\n    <p>The numbers say that room is every room. Seventy-eight per cent of AI users bring their own tools to work, according to the <a href=\"https:\/\/www.microsoft.com\/en-us\/worklab\/work-trend-index\/ai-at-work-is-here-now-comes-the-hard-part\" target=\"_blank\" rel=\"noopener noreferrer\">Microsoft Work Trend Index 2024<\/a>. Meanwhile, 49% of employees have hidden their AI use from a manager, according to <a href=\"https:\/\/www.globenewswire.com\/news-release\/2025\/08\/27\/3140046\/0\/en\/Employees-Left-Behind-in-Workplace-AI-Boom-New-WalkMe-Survey-Finds.html\" target=\"_blank\" rel=\"noopener noreferrer\">WalkMe's 2025 survey<\/a>. Ethan Mollick gave the hiders a name that stuck: secret cyborgs.<\/p>\n\n    <div class=\"ns-stat-grid\">\n      <section class=\"ns-stat-card\">\n        <span class=\"ns-stat-number\">78%<\/span>\n        <p>of AI users bring their own AI tools to work.<\/p>\n      <\/section>\n\n      <section class=\"ns-stat-card\">\n        <span class=\"ns-stat-number\">49%<\/span>\n        <p>of employees have hidden their AI use from a manager.<\/p>\n      <\/section>\n\n      <section class=\"ns-stat-card\">\n        <span class=\"ns-stat-number\">90%<\/span>\n        <p>of workers use personal AI tools daily, according to MIT's 2025 data.<\/p>\n      <\/section>\n    <\/div>\n\n    <p>The standard corporate response is a policy document and a firewall rule. Here is why that fails, and the 90-day path that works instead.<\/p>\n\n    <h2>Why bans fail, mechanically<\/h2>\n\n    <p>Bans do not remove demand; they relocate it. When Samsung banned ChatGPT in 2023 after a source-code leak, usage did not stop. It moved to personal devices, where the company had even less visibility than before. Substitution, not compliance, is the reliable outcome, and it comes with a bill.<\/p>\n\n    <p>Breaches involving high levels of Shadow AI cost an average of $670,000 more, according to <a href=\"https:\/\/www.ibm.com\/think\/x-force\/2025-cost-of-a-data-breach-navigating-ai\" target=\"_blank\" rel=\"noopener noreferrer\">IBM's 2025 analysis<\/a>, and Shadow AI detections are rising fourfold year on year, according to the <a href=\"https:\/\/www.verizon.com\/business\/resources\/T1ae\/reports\/2026-dbir-data-breach-investigations-report.pdf\" target=\"_blank\" rel=\"noopener noreferrer\">Verizon 2026 DBIR<\/a>.<\/p>\n\n    <p>There is also an enforcement problem nobody likes stating plainly. The people who would enforce the ban are its heaviest violators. A rule the leadership breaks daily is not a rule; it is d\u00e9cor.<\/p>\n\n    <h2>Reframing Shadow AI as a demand signal<\/h2>\n\n    <p>Read Shadow AI as a demand signal and the whole picture reorganises. Your people have already found where AI creates value in their jobs, quietly redesigned their workflows around it, and are running the result on personal accounts.<\/p>\n\n    <p><a href=\"https:\/\/nanda.media.mit.edu\/ai_report_2025.pdf\" target=\"_blank\" rel=\"noopener noreferrer\">MIT's 2025 data<\/a> made the scale plain. Roughly 90% of workers use personal AI tools daily, against about 40% of companies with official subscriptions.<\/p>\n\n    <p><strong>That is not only a compliance crisis. It is the most detailed and honest requirements document your AI programme will ever receive. It is simply written in browser histories instead of workshops.<\/strong><\/p>\n\n    <h2>The 90-day path<\/h2>\n\n    <div class=\"ns-roadmap\">\n      <section class=\"ns-phase\" data-phase=\"30\">\n        <span class=\"ns-phase-label\">Days 1 to 30<\/span>\n        <h3>Amnesty and inventory<\/h3>\n        <p>Announce a no-consequences disclosure window. Ask employees which AI tools they use and what problems those tools solve.<\/p>\n        <p><strong>Outcome:<\/strong> A practical map of real AI demand, not a confession booth.<\/p>\n      <\/section>\n\n      <section class=\"ns-phase\" data-phase=\"60\">\n        <span class=\"ns-phase-label\">Days 31 to 60<\/span>\n        <h3>Build the fast lane<\/h3>\n        <p>Establish an approved-tool route with a real service commitment. Answer requests in days, not quarters, and cover the five most common use cases.<\/p>\n        <p><strong>Outcome:<\/strong> A sanctioned route that is faster than the workaround.<\/p>\n      <\/section>\n\n      <section class=\"ns-phase\" data-phase=\"90\">\n        <span class=\"ns-phase-label\">Days 61 to 90<\/span>\n        <h3>Make it stick<\/h3>\n        <p>Start a tool registry, instrument approved usage and publicly recognise teams that disclose clever unsanctioned workflows and help migrate them.<\/p>\n        <p><strong>Outcome:<\/strong> Better visibility, adoption and disclosure.<\/p>\n      <\/section>\n    <\/div>\n\n    <h2>Keep the data rules to one page<\/h2>\n\n    <p>Pair the amnesty with three clear data tiers. If the classification system requires a workshop to explain, employees will ignore it.<\/p>\n\n    <div class=\"ns-data-tiers\">\n      <section class=\"ns-tier ns-tier-green\">\n        <span class=\"ns-tier-bar\" aria-hidden=\"true\"><\/span>\n        <h3>Green data<\/h3>\n        <p>Public and low-risk information that may be used with approved general-purpose tools.<\/p>\n      <\/section>\n\n      <section class=\"ns-tier ns-tier-amber\">\n        <span class=\"ns-tier-bar\" aria-hidden=\"true\"><\/span>\n        <h3>Amber data<\/h3>\n        <p>Internal or controlled information that requires an approved, governed AI platform.<\/p>\n      <\/section>\n\n      <section class=\"ns-tier ns-tier-red\">\n        <span class=\"ns-tier-bar\" aria-hidden=\"true\"><\/span>\n        <h3>Red data<\/h3>\n        <p>Sensitive information that must never leave designated governed systems.<\/p>\n      <\/section>\n    <\/div>\n\n    <p>The fast lane applies the same principle as <a href=\"https:\/\/netsurit.com\/en-za\/how-can-you-adopt-ai-in-business-without-disrupting-operations\/\">adopting AI without disrupting operations<\/a>: the sanctioned path only wins if it is faster than the workaround.<\/p>\n\n    <section class=\"ns-edge\">\n      <h2>The honest edge<\/h2>\n      <p>Amnesty is not absolution. Some data can never touch a personal tool. If the inventory surfaces genuine exfiltration of red-tier data, that is a security incident, not an amnesty item.<\/p>\n      <p>The tiers are what make the generosity safe. Governance without teeth is theatre; teeth without a fast lane is simply a slower way to fail.<\/p>\n    <\/section>\n\n    <h2>Frequently asked questions<\/h2>\n\n    <div class=\"ns-faq-list\">\n      <details>\n        <summary>What is Shadow AI?<\/summary>\n        <p>Shadow AI is employees using AI tools that IT has not approved or does not know about, usually because those tools solve a real problem faster than the official options do.<\/p>\n      <\/details>\n\n      <details>\n        <summary>Why do bans on unsanctioned AI tools fail?<\/summary>\n        <p>Bans do not remove the demand. They relocate it, often onto personal devices where IT has even less visibility. That is what happened when Samsung banned ChatGPT in 2023.<\/p>\n      <\/details>\n\n      <details>\n        <summary>What does the 90-day governance plan involve?<\/summary>\n        <p>It has three phases: 30 days of no-consequences amnesty and inventory, 30 days building a fast approved-tool route, and 30 days making the approach stick through a tool registry and usage tracking.<\/p>\n      <\/details>\n\n      <details>\n        <summary>Does amnesty mean no consequences for past AI use?<\/summary>\n        <p>Amnesty covers disclosure, not a blanket pass. If the inventory reveals an actual exposure of sensitive data, it should be treated as a security incident, not an amnesty item.<\/p>\n      <\/details>\n    <\/div>\n\n    <section class=\"ns-conclusion\">\n      <h2>One more honest note<\/h2>\n\n      <p>I do not know a reliable way to reach the last few per cent who will hide usage no matter what. I have stopped designing for them. Design for the 90% who would happily use the sanctioned path if it were good.<\/p>\n\n      <p>The Monday move fits into three sentences at your next town hall: \u201cWe know most of you use AI tools we have not approved. For the next 30 days, we simply want to know what and why, with no consequences. Then we will build you a faster legal way to do the same thing.\u201d<\/p>\n\n      <p>Say that, mean it, and you will learn more about your organisation's AI readiness in a month than any maturity assessment will tell you.<\/p>\n    <\/section>\n\n    <aside class=\"ns-cta\" aria-label=\"Secure AI platform\">\n      <h2>Give employees a faster, sanctioned way to use AI<\/h2>\n      <p>Netsurit's Secure AI platform gives teams an approved route to use AI while maintaining the governance, visibility and data protection the organisation requires.<\/p>\n      <a class=\"ns-button\" href=\"https:\/\/za.netsurit.com\/secure-ai\">Explore the Secure AI platform<\/a>\n    <\/aside>\n\n    <section class=\"ns-author-box\" aria-labelledby=\"ns-author-heading\">\n      <span class=\"ns-author-label\">From the author<\/span>\n      <h2 id=\"ns-author-heading\">Dr Jan van Niekerk<\/h2>\n      <p>Dr Jan van Niekerk is Netsurit's SVP of Data &amp; AI Strategy, based in Johannesburg, South Africa, where he leads the Innovate practice, alongside advisory work through Progreziv and Spheralytical. He writes about the operational realities of enterprise AI: where it delivers, where it stalls and where it quietly goes underground.<\/p>\n    <\/section>\n\n    <section class=\"ns-share\" aria-labelledby=\"ns-share-heading\">\n      <span class=\"ns-share-title\" id=\"ns-share-heading\">Share this insight<\/span>\n      <div class=\"ns-share-links\">\n        <a class=\"ns-share-link\" href=\"https:\/\/www.linkedin.com\/sharing\/share-offsite\/?url=https%3A%2F%2Fnetsurit.com%2Fen-za%2Fshadow-ai-governance-plan%2F\" target=\"_blank\" rel=\"noopener noreferrer\" aria-label=\"Share this article on LinkedIn\">LinkedIn<\/a>\n        <a class=\"ns-share-link\" href=\"https:\/\/www.facebook.com\/sharer\/sharer.php?u=https%3A%2F%2Fnetsurit.com%2Fen-za%2Fshadow-ai-governance-plan%2F\" target=\"_blank\" rel=\"noopener noreferrer\" aria-label=\"Share this article on Facebook\">Facebook<\/a>\n        <a class=\"ns-share-link\" href=\"https:\/\/twitter.com\/intent\/tweet?url=https%3A%2F%2Fnetsurit.com%2Fen-za%2Fshadow-ai-governance-plan%2F&amp;text=Shadow%20AI%20Is%20a%20Demand%20Signal.%20Read%20It.\" target=\"_blank\" rel=\"noopener noreferrer\" aria-label=\"Share this article on X\">X<\/a>\n        <a class=\"ns-share-link\" href=\"mailto:?subject=Shadow%20AI%20Is%20a%20Demand%20Signal.%20Read%20It.&amp;body=https%3A%2F%2Fnetsurit.com%2Fen-za%2Fshadow-ai-governance-plan%2F\" aria-label=\"Share this article by email\">Email<\/a>\n      <\/div>\n    <\/section>\n\n    <section class=\"ns-related\" aria-labelledby=\"ns-related-heading\">\n      <span class=\"ns-kicker\">Continue reading<\/span>\n      <h2 id=\"ns-related-heading\">Related insights<\/h2>\n\n      <div class=\"ns-related-grid\">\n        <a class=\"ns-related-card\" href=\"https:\/\/netsurit.com\/en-za\/are-your-employees-using-ai-without-you-knowing\/\">\n          <img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/netsurit.com\/en-za\/wp-content\/uploads\/sites\/2\/2026\/04\/Are-Your-Employees-Using-AI-Without-You-Knowing-1024x576.jpg\" alt=\"Employees using AI tools without organisational approval or oversight\" loading=\"lazy\" width=\"1024\" height=\"576\">\n          <span class=\"ns-related-copy\">\n            <span class=\"ns-card-label\">Shadow AI risks<\/span>\n            <h3>Are Your Employees Using AI Without You Knowing?<\/h3>\n            <span class=\"ns-card-link\">Read the article<\/span>\n          <\/span>\n        <\/a>\n\n        <a class=\"ns-related-card\" href=\"https:\/\/netsurit.com\/en-za\/how-can-you-adopt-ai-in-business-without-disrupting-operations\/\">\n          <img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/netsurit.com\/en-za\/wp-content\/uploads\/sites\/2\/2026\/07\/How-Can-You-Adopt-AI-in-Business-Without-Disrupting-Operations-1024x576.jpg\" alt=\"Team discussing how to adopt AI without disrupting business operations\" loading=\"lazy\" width=\"1024\" height=\"576\">\n          <span class=\"ns-related-copy\">\n            <span class=\"ns-card-label\">Secure AI adoption<\/span>\n            <h3>How Can You Adopt AI in Business Without Disrupting Operations?<\/h3>\n            <span class=\"ns-card-link\">Read the article<\/span>\n          <\/span>\n        <\/a>\n      <\/div>\n    <\/section>\n  <\/div>\n<\/article>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Shadow AI often reveals where employees are finding value faster than official programmes can respond. Dr Jan van Niekerk outlines a 90-day path from hidden AI use to governed adoption.<\/p>\n","protected":false},"author":16,"featured_media":24625,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"nf_dc_page":"","content-type":"","footnotes":""},"categories":[21],"tags":[174,176,178,52,177,179,175],"class_list":["post-24621","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-blog","tag-ai-governance","tag-ai-security","tag-data-protection","tag-digital-transformation","tag-employee-technology-use","tag-generative-ai","tag-shadow-ai"],"acf":[],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO Pro 5.0.2 - aioseo.com -->\n\t<meta name=\"description\" content=\"Shadow AI reveals where employees need better approved tools. Read the 90-day plan.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Netsurit\"\/>\n\t<meta name=\"google-site-verification\" content=\"5GWTTA4AhSisFxUP2NfFam7f7MuBpSYQyA8Ou3RMDrM\" \/>\n\t<link rel=\"canonical\" href=\"https:\/\/netsurit.com\/en-za\/shadow-ai-governance-plan\/\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO Pro (AIOSEO) 5.0.2\" \/>\n\t\t<meta property=\"og:locale\" content=\"en_US\" \/>\n\t\t<meta property=\"og:site_name\" content=\"Netsurit ZA\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"Shadow AI Is a Demand Signal. Read It\" \/>\n\t\t<meta property=\"og:description\" content=\"Shadow AI often reveals where employees are finding value faster than official programmes can respond. Dr Jan van Niekerk outlines a 90-day path from hidden AI use to governed adoption.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/netsurit.com\/en-za\/shadow-ai-governance-plan\/\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/netsurit.com\/en-za\/wp-content\/uploads\/sites\/2\/2026\/07\/Netsurit-OG-Image.webp\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/netsurit.com\/en-za\/wp-content\/uploads\/sites\/2\/2026\/07\/Netsurit-OG-Image.webp\" \/>\n\t\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t\t<meta property=\"og:image:height\" content=\"628\" \/>\n\t\t<meta property=\"article:tag\" content=\"ai governance\" \/>\n\t\t<meta property=\"article:tag\" content=\"ai security\" \/>\n\t\t<meta property=\"article:tag\" content=\"data protection\" \/>\n\t\t<meta property=\"article:tag\" content=\"digital transformation\" \/>\n\t\t<meta property=\"article:tag\" content=\"employee technology use\" \/>\n\t\t<meta property=\"article:tag\" content=\"generative ai\" \/>\n\t\t<meta property=\"article:tag\" content=\"shadow ai\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-09-22T18:22:36+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-09-22T18:41:15+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/Netsurit\/\" \/>\n\t\t<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n\t\t<meta name=\"twitter:site\" content=\"@netsurit\" \/>\n\t\t<meta name=\"twitter:title\" content=\"Shadow AI Is a Demand Signal. Read It\" \/>\n\t\t<meta name=\"twitter:description\" content=\"Shadow AI often reveals where employees are finding value faster than official programmes can respond. Dr Jan van Niekerk outlines a 90-day path from hidden AI use to governed adoption.\" \/>\n\t\t<meta name=\"twitter:creator\" content=\"@netsurit\" \/>\n\t\t<meta name=\"twitter:image\" content=\"https:\/\/netsurit.com\/en-za\/wp-content\/uploads\/sites\/2\/2026\/07\/Netsurit-OG-Image.webp\" \/>\n\t\t<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t\t<meta name=\"twitter:data1\" content=\"Netsurit\" \/>\n\t\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t\t<meta name=\"twitter:data2\" content=\"6 minutes\" \/>\n\t\t<script type=\"application\/ld+json\" class=\"aioseo-schema\">\n\t\t\t{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/netsurit.com\\\/en-za\\\/shadow-ai-governance-plan\\\/#article\",\"name\":\"Shadow AI | A 90-Day Governance Plan | Netsurit ZA\",\"headline\":\"Shadow AI Is a Demand Signal: What Leaders Should Do\",\"author\":{\"@id\":\"https:\\\/\\\/netsurit.com\\\/en-za\\\/author\\\/netsurit\\\/#author\"},\"publisher\":{\"@id\":\"https:\\\/\\\/netsurit.com\\\/en-za\\\/#organization\"},\"image\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/netsurit.com\\\/en-za\\\/wp-content\\\/uploads\\\/sites\\\/2\\\/2026\\\/09\\\/shadow-ai-governance-plan.webp\",\"width\":1920,\"height\":1111,\"caption\":\"Business leaders mapping employee Shadow AI use and approved AI tools\"},\"datePublished\":\"2026-09-22T20:22:36+02:00\",\"dateModified\":\"2026-09-22T20:41:15+02:00\",\"inLanguage\":\"en-US\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/netsurit.com\\\/en-za\\\/shadow-ai-governance-plan\\\/#webpage\"},\"isPartOf\":{\"@id\":\"https:\\\/\\\/netsurit.com\\\/en-za\\\/shadow-ai-governance-plan\\\/#webpage\"},\"articleSection\":\"Blog, AI governance, AI security, Data protection, Digital Transformation, Employee technology use, Generative AI, Shadow AI\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/netsurit.com\\\/en-za\\\/shadow-ai-governance-plan\\\/#breadcrumblist\",\"itemListElement\":[{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/netsurit.com\\\/en-za\\\/#listItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/netsurit.com\\\/en-za\\\/\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/netsurit.com\\\/en-za\\\/category\\\/blog\\\/#listItem\",\"name\":\"Blog\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/netsurit.com\\\/en-za\\\/category\\\/blog\\\/#listItem\",\"position\":2,\"name\":\"Blog\",\"item\":\"https:\\\/\\\/netsurit.com\\\/en-za\\\/category\\\/blog\\\/\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/netsurit.com\\\/en-za\\\/shadow-ai-governance-plan\\\/#listItem\",\"name\":\"Shadow AI Is a Demand Signal: What Leaders Should Do\"},\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/netsurit.com\\\/en-za\\\/#listItem\",\"name\":\"Home\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/netsurit.com\\\/en-za\\\/shadow-ai-governance-plan\\\/#listItem\",\"position\":3,\"name\":\"Shadow AI Is a Demand Signal: What Leaders Should Do\",\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/netsurit.com\\\/en-za\\\/category\\\/blog\\\/#listItem\",\"name\":\"Blog\"}}]},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/netsurit.com\\\/en-za\\\/#organization\",\"name\":\"Netsurit ZA\",\"url\":\"https:\\\/\\\/netsurit.com\\\/en-za\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/netsurit.com\\\/en-za\\\/wp-content\\\/uploads\\\/sites\\\/2\\\/2026\\\/07\\\/Netsurit-Logo-400-x-141-px.webp\",\"@id\":\"https:\\\/\\\/netsurit.com\\\/en-za\\\/shadow-ai-governance-plan\\\/#organizationLogo\",\"width\":400,\"height\":141,\"caption\":\"Two red arrows pointing in opposite directions (up and down), suggesting expand\\\/collapse or resize controls.\"},\"image\":{\"@id\":\"https:\\\/\\\/netsurit.com\\\/en-za\\\/shadow-ai-governance-plan\\\/#organizationLogo\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/Netsurit\\\/\",\"https:\\\/\\\/x.com\\\/netsurit\",\"https:\\\/\\\/instagram.com\\\/netsurit_\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/netsurit\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/netsurit.com\\\/en-za\\\/author\\\/netsurit\\\/#author\",\"url\":\"https:\\\/\\\/netsurit.com\\\/en-za\\\/author\\\/netsurit\\\/\",\"name\":\"Netsurit\",\"image\":{\"@type\":\"ImageObject\",\"@id\":\"https:\\\/\\\/netsurit.com\\\/en-za\\\/shadow-ai-governance-plan\\\/#authorImage\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/566be71324c1e0a3b6a9815e969f73d17ad645a60df53771437900fd2b6b8047?s=96&d=mm&r=g\",\"width\":96,\"height\":96,\"caption\":\"Netsurit\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/netsurit.com\\\/en-za\\\/shadow-ai-governance-plan\\\/#webpage\",\"url\":\"https:\\\/\\\/netsurit.com\\\/en-za\\\/shadow-ai-governance-plan\\\/\",\"name\":\"Shadow AI | A 90-Day Governance Plan | Netsurit ZA\",\"description\":\"Shadow AI reveals where employees need better approved tools. Read the 90-day plan.\",\"inLanguage\":\"en-US\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/netsurit.com\\\/en-za\\\/#website\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/netsurit.com\\\/en-za\\\/shadow-ai-governance-plan\\\/#breadcrumblist\"},\"author\":{\"@id\":\"https:\\\/\\\/netsurit.com\\\/en-za\\\/author\\\/netsurit\\\/#author\"},\"creator\":{\"@id\":\"https:\\\/\\\/netsurit.com\\\/en-za\\\/author\\\/netsurit\\\/#author\"},\"image\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/netsurit.com\\\/en-za\\\/wp-content\\\/uploads\\\/sites\\\/2\\\/2026\\\/09\\\/shadow-ai-governance-plan.webp\",\"@id\":\"https:\\\/\\\/netsurit.com\\\/en-za\\\/shadow-ai-governance-plan\\\/#mainImage\",\"width\":1920,\"height\":1111,\"caption\":\"Business leaders mapping employee Shadow AI use and approved AI tools\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/netsurit.com\\\/en-za\\\/shadow-ai-governance-plan\\\/#mainImage\"},\"datePublished\":\"2026-09-22T20:22:36+02:00\",\"dateModified\":\"2026-09-22T20:41:15+02:00\"},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/netsurit.com\\\/en-za\\\/#website\",\"url\":\"https:\\\/\\\/netsurit.com\\\/en-za\\\/\",\"name\":\"Netsurit ZA\",\"alternateName\":\"Netsurit South Africa\",\"description\":\"IT Support and Consulting\",\"inLanguage\":\"en-US\",\"publisher\":{\"@id\":\"https:\\\/\\\/netsurit.com\\\/en-za\\\/#organization\"}}]}\n\t\t<\/script>\n\t\t<!-- All in One SEO Pro -->\r\n\t\t<title>Shadow AI | A 90-Day Governance Plan | Netsurit ZA<\/title>\n\n","aioseo_head_json":{"title":"Shadow AI | A 90-Day Governance Plan | Netsurit ZA","description":"Shadow AI reveals where employees need better approved tools. Read the 90-day plan.","canonical_url":"https:\/\/netsurit.com\/en-za\/shadow-ai-governance-plan\/","robots":"max-image-preview:large","keywords":"","webmasterTools":{"google-site-verification":"5GWTTA4AhSisFxUP2NfFam7f7MuBpSYQyA8Ou3RMDrM","miscellaneous":""},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/netsurit.com\/en-za\/shadow-ai-governance-plan\/#article","name":"Shadow AI | A 90-Day Governance Plan | Netsurit ZA","headline":"Shadow AI Is a Demand Signal: What Leaders Should Do","author":{"@id":"https:\/\/netsurit.com\/en-za\/author\/netsurit\/#author"},"publisher":{"@id":"https:\/\/netsurit.com\/en-za\/#organization"},"image":{"@type":"ImageObject","url":"https:\/\/netsurit.com\/en-za\/wp-content\/uploads\/sites\/2\/2026\/09\/shadow-ai-governance-plan.webp","width":1920,"height":1111,"caption":"Business leaders mapping employee Shadow AI use and approved AI tools"},"datePublished":"2026-09-22T20:22:36+02:00","dateModified":"2026-09-22T20:41:15+02:00","inLanguage":"en-US","mainEntityOfPage":{"@id":"https:\/\/netsurit.com\/en-za\/shadow-ai-governance-plan\/#webpage"},"isPartOf":{"@id":"https:\/\/netsurit.com\/en-za\/shadow-ai-governance-plan\/#webpage"},"articleSection":"Blog, AI governance, AI security, Data protection, Digital Transformation, Employee technology use, Generative AI, Shadow AI"},{"@type":"BreadcrumbList","@id":"https:\/\/netsurit.com\/en-za\/shadow-ai-governance-plan\/#breadcrumblist","itemListElement":[{"@type":"ListItem","@id":"https:\/\/netsurit.com\/en-za\/#listItem","position":1,"name":"Home","item":"https:\/\/netsurit.com\/en-za\/","nextItem":{"@type":"ListItem","@id":"https:\/\/netsurit.com\/en-za\/category\/blog\/#listItem","name":"Blog"}},{"@type":"ListItem","@id":"https:\/\/netsurit.com\/en-za\/category\/blog\/#listItem","position":2,"name":"Blog","item":"https:\/\/netsurit.com\/en-za\/category\/blog\/","nextItem":{"@type":"ListItem","@id":"https:\/\/netsurit.com\/en-za\/shadow-ai-governance-plan\/#listItem","name":"Shadow AI Is a Demand Signal: What Leaders Should Do"},"previousItem":{"@type":"ListItem","@id":"https:\/\/netsurit.com\/en-za\/#listItem","name":"Home"}},{"@type":"ListItem","@id":"https:\/\/netsurit.com\/en-za\/shadow-ai-governance-plan\/#listItem","position":3,"name":"Shadow AI Is a Demand Signal: What Leaders Should Do","previousItem":{"@type":"ListItem","@id":"https:\/\/netsurit.com\/en-za\/category\/blog\/#listItem","name":"Blog"}}]},{"@type":"Organization","@id":"https:\/\/netsurit.com\/en-za\/#organization","name":"Netsurit ZA","url":"https:\/\/netsurit.com\/en-za\/","logo":{"@type":"ImageObject","url":"https:\/\/netsurit.com\/en-za\/wp-content\/uploads\/sites\/2\/2026\/07\/Netsurit-Logo-400-x-141-px.webp","@id":"https:\/\/netsurit.com\/en-za\/shadow-ai-governance-plan\/#organizationLogo","width":400,"height":141,"caption":"Two red arrows pointing in opposite directions (up and down), suggesting expand\/collapse or resize controls."},"image":{"@id":"https:\/\/netsurit.com\/en-za\/shadow-ai-governance-plan\/#organizationLogo"},"sameAs":["https:\/\/www.facebook.com\/Netsurit\/","https:\/\/x.com\/netsurit","https:\/\/instagram.com\/netsurit_","https:\/\/www.linkedin.com\/company\/netsurit"]},{"@type":"Person","@id":"https:\/\/netsurit.com\/en-za\/author\/netsurit\/#author","url":"https:\/\/netsurit.com\/en-za\/author\/netsurit\/","name":"Netsurit","image":{"@type":"ImageObject","@id":"https:\/\/netsurit.com\/en-za\/shadow-ai-governance-plan\/#authorImage","url":"https:\/\/secure.gravatar.com\/avatar\/566be71324c1e0a3b6a9815e969f73d17ad645a60df53771437900fd2b6b8047?s=96&d=mm&r=g","width":96,"height":96,"caption":"Netsurit"}},{"@type":"WebPage","@id":"https:\/\/netsurit.com\/en-za\/shadow-ai-governance-plan\/#webpage","url":"https:\/\/netsurit.com\/en-za\/shadow-ai-governance-plan\/","name":"Shadow AI | A 90-Day Governance Plan | Netsurit ZA","description":"Shadow AI reveals where employees need better approved tools. Read the 90-day plan.","inLanguage":"en-US","isPartOf":{"@id":"https:\/\/netsurit.com\/en-za\/#website"},"breadcrumb":{"@id":"https:\/\/netsurit.com\/en-za\/shadow-ai-governance-plan\/#breadcrumblist"},"author":{"@id":"https:\/\/netsurit.com\/en-za\/author\/netsurit\/#author"},"creator":{"@id":"https:\/\/netsurit.com\/en-za\/author\/netsurit\/#author"},"image":{"@type":"ImageObject","url":"https:\/\/netsurit.com\/en-za\/wp-content\/uploads\/sites\/2\/2026\/09\/shadow-ai-governance-plan.webp","@id":"https:\/\/netsurit.com\/en-za\/shadow-ai-governance-plan\/#mainImage","width":1920,"height":1111,"caption":"Business leaders mapping employee Shadow AI use and approved AI tools"},"primaryImageOfPage":{"@id":"https:\/\/netsurit.com\/en-za\/shadow-ai-governance-plan\/#mainImage"},"datePublished":"2026-09-22T20:22:36+02:00","dateModified":"2026-09-22T20:41:15+02:00"},{"@type":"WebSite","@id":"https:\/\/netsurit.com\/en-za\/#website","url":"https:\/\/netsurit.com\/en-za\/","name":"Netsurit ZA","alternateName":"Netsurit South Africa","description":"IT Support and Consulting","inLanguage":"en-US","publisher":{"@id":"https:\/\/netsurit.com\/en-za\/#organization"}}]},"og:locale":"en_US","og:site_name":"Netsurit ZA","og:type":"article","og:title":"Shadow AI Is a Demand Signal. Read It","og:description":"Shadow AI often reveals where employees are finding value faster than official programmes can respond. Dr Jan van Niekerk outlines a 90-day path from hidden AI use to governed adoption.","og:url":"https:\/\/netsurit.com\/en-za\/shadow-ai-governance-plan\/","og:image":"https:\/\/netsurit.com\/en-za\/wp-content\/uploads\/sites\/2\/2026\/07\/Netsurit-OG-Image.webp","og:image:secure_url":"https:\/\/netsurit.com\/en-za\/wp-content\/uploads\/sites\/2\/2026\/07\/Netsurit-OG-Image.webp","og:image:width":1200,"og:image:height":628,"article:tag":["ai governance","ai security","data protection","digital transformation","employee technology use","generative ai","shadow ai"],"article:published_time":"2026-09-22T18:22:36+00:00","article:modified_time":"2026-09-22T18:41:15+00:00","article:publisher":"https:\/\/www.facebook.com\/Netsurit\/","twitter:card":"summary_large_image","twitter:site":"@netsurit","twitter:title":"Shadow AI Is a Demand Signal. Read It","twitter:description":"Shadow AI often reveals where employees are finding value faster than official programmes can respond. Dr Jan van Niekerk outlines a 90-day path from hidden AI use to governed adoption.","twitter:creator":"@netsurit","twitter:image":"https:\/\/netsurit.com\/en-za\/wp-content\/uploads\/sites\/2\/2026\/07\/Netsurit-OG-Image.webp","twitter:label1":"Written by","twitter:data1":"Netsurit","twitter:label2":"Est. reading time","twitter:data2":"6 minutes"},"aioseo_meta_data":{"post_id":"24621","title":"Shadow AI | A 90-Day Governance Plan | Netsurit ZA","description":"Shadow AI reveals where employees need better approved tools. Read the 90-day plan.","keywords":null,"keyphrases":{"focus":{"keyphrase":"Shadow AI","score":0,"analysis":[]},"additional":[]},"primary_term":null,"canonical_url":null,"og_title":"Shadow AI Is a Demand Signal. Read It","og_description":"#post_excerpt","og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":"","og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":"Shadow AI Is a Demand Signal. Read It","twitter_description":"#post_excerpt","schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"Article","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":"-1","robots_max_videopreview":"-1","robots_max_imagepreview":"large","priority":null,"frequency":"default","local_seo":null,"limit_modified_date":false,"created":"2026-09-22 18:13:30","updated":"2026-09-23 06:18:44","ai":{"faqs":[],"keyPoints":[],"schemas":[],"titles":[],"descriptions":[],"socialPosts":{"email":{"subject":"","preview":"","content":""},"linkedin":[],"twitter":[],"facebook":[],"instagram":[]}},"breadcrumb_settings":null,"seo_analyzer_scan_date":"2026-09-22 18:42:34","reviewed_by":"0","focus_keyword":"Shadow AI","additional_keywords":null,"truseo_locale":null},"aioseo_breadcrumb":"<div class=\"aioseo-breadcrumbs\"><span class=\"aioseo-breadcrumb\">\n\t<a href=\"https:\/\/netsurit.com\/en-za\/\" title=\"Home\">Home<\/a>\n<\/span><span class=\"aioseo-breadcrumb-separator\">\u00bb<\/span><span class=\"aioseo-breadcrumb\">\n\t<a href=\"https:\/\/netsurit.com\/en-za\/category\/blog\/\" title=\"Blog\">Blog<\/a>\n<\/span><span class=\"aioseo-breadcrumb-separator\">\u00bb<\/span><span class=\"aioseo-breadcrumb\">\n\tShadow AI Is a Demand Signal: What Leaders Should Do\n<\/span><\/div>","aioseo_breadcrumb_json":[{"label":"Home","link":"https:\/\/netsurit.com\/en-za\/"},{"label":"Blog","link":"https:\/\/netsurit.com\/en-za\/category\/blog\/"},{"label":"Shadow AI Is a Demand Signal: What Leaders Should Do","link":"https:\/\/netsurit.com\/en-za\/shadow-ai-governance-plan\/"}],"_yoast_wpseo_title":"","_yoast_wpseo_metadesc":"","yoast_noindex":false,"_links":{"self":[{"href":"https:\/\/netsurit.com\/en-za\/wp-json\/wp\/v2\/posts\/24621","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/netsurit.com\/en-za\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/netsurit.com\/en-za\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/netsurit.com\/en-za\/wp-json\/wp\/v2\/users\/16"}],"replies":[{"embeddable":true,"href":"https:\/\/netsurit.com\/en-za\/wp-json\/wp\/v2\/comments?post=24621"}],"version-history":[{"count":4,"href":"https:\/\/netsurit.com\/en-za\/wp-json\/wp\/v2\/posts\/24621\/revisions"}],"predecessor-version":[{"id":24629,"href":"https:\/\/netsurit.com\/en-za\/wp-json\/wp\/v2\/posts\/24621\/revisions\/24629"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/netsurit.com\/en-za\/wp-json\/wp\/v2\/media\/24625"}],"wp:attachment":[{"href":"https:\/\/netsurit.com\/en-za\/wp-json\/wp\/v2\/media?parent=24621"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/netsurit.com\/en-za\/wp-json\/wp\/v2\/categories?post=24621"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/netsurit.com\/en-za\/wp-json\/wp\/v2\/tags?post=24621"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}