Managing Shadow IT in the Age of AI: Strategies for Modern MSPs

The most consequential development discussed is the rapid proliferation of Shadow IT in client environments, with emphasis on the unchecked adoption of cloud SaaS applications and artificial intelligence (AI) tools by end users. Speakers noted that this has led to a substantial loss of MSP control over client IT environments, eroding trusted advisor status and prompting clients to question the ongoing necessity of working with their MSP. The pervasive use of AI and SaaS products without guidance or oversight introduces governance and security risks, particularly relating to sensitive business data being accessible to third-party vendors and potentially incorporated into external data sets. The episode provided details on how Shadow IT emerges, highlighting the ease with which employees can adopt SaaS and AI tools through free trials, personal accounts, or non-business credit cards, often outside of IT’s direct visibility. According to Amy and El, clients are increasingly self-serving their technology needs, shifting traditional MSP-client dynamics. The conversation outlined specific governance issues, such as most AI tools ingesting client data into the cloud, with limited assurance as to how it will be used or protected unless higher tiers of service are paid for—an unlikely scenario for most SMBs using free versions. Secondary discussion focused on broader industry fragmentation and the challenges it poses for knowledge-sharing, consensus-building, and vendor feedback. The speakers recalled a time when MSP best practices spread rapidly through tightly-knit peer groups or single platforms but observed current information channels are numerous and scattered, such as Discord, Reddit, LinkedIn, and Facebook. This dispersion hinders both MSPs and vendors from collaborating effectively and reduces the feedback loop necessary for responsive product development and operational improvement. The key implications for MSPs and IT leaders include the pressing need to shift operational models from rigid, tool-centric offerings to relationship- and advisory-focused services. There is heightened risk if MSPs fail to address governance and security concerns, especially as end users continue adopting technology independently. Speakers recommend implementing proactive client education, detailed risk analysis on SaaS and AI integrations, and establishing clear communication strategies to reclaim the advisory role. MSPs are encouraged to align compensation models to advisory activities, as future client value is projected to depend more on strategic guidance than product-resale or ticket-resolution metrics.Title: How are you managing Shadow IT? Topics: How are you managing Shadow IT? Is the MSP industry too fragmented in how we share knowledge? Why do MSPs exist? (blog posts from “Amy’s Sayings”: https://www.thirdtier.net/?s=Amy%27s+sayings) What does it mean to be a M365-based MSP in 2026? Upcoming events: Zero Trust Workshop- 3 sessions starting May 28.  Register here: https://www.thirdtier.net/2026/04/27/arriving-in-may-zero-trust-workshop/ Mastermind Event with James (and Amy is a guest speaker!) in Omaha, NE Register here: https://kernanconsulting-mastermind.mykajabi.com/mastermind-event Hosted by Simplecast, an AdsWizz company. See pcm.adswizz.com for information about our collection and use of personal data for advertising.