AI tools have long since become part of everyday work, often without the IT department’s knowledge. Employees use chatbots, browser extensions, and AI agents to work more productively. What’s often missing, however, is transparency. Shadow AI is no longer a marginal phenomenon. It is a structural challenge with direct implications for IT risk management.