The Framework Behind Shadow IT: Why People Make the Choices They Do
- Joel Larson, PhD
- Jan 7
- 3 min read
Shadow IT Leadership Series — Post 5
Over the past several posts, this series has explored Shadow IT through a lens that many higher education leaders rarely get to see:
Shadow IT as a signal, not a threat
The hidden costs institutions absorb
The innovation pressure that creates workarounds
The leadership practices that turn conflict into partnership
But there is one final piece — the part that ties all of this together.
A framework that explains, predictably and consistently, why people turn to Shadow IT in the first place and why certain governance strategies succeed while others fail.
That framework is Technology Threat Avoidance Theory (TTAT), and understanding it is essential for any institution trying to reduce Shadow IT without slowing innovation.
This post is the payoff for the entire series.
Why Enforcement Alone Never Works
Most discussions about Shadow IT begin with compliance:
“Is this tool approved?”
“Does it meet policy?”
“Who signed this contract?”
Those questions matter. But they only address the surface of the issue.
Shadow IT is not fundamentally a technical problem. It is a behavioral one.
People choose the tools they believe will help them succeed — under the pressures they feel, in the moment they feel them.
Understanding Shadow IT requires understanding the human perceptions that shape those choices.
That’s exactly what TTAT provides.
Technology Threat Avoidance Theory (TTAT):
A Framework for Understanding Shadow IT Behavior
TTAT explains how individuals decide whether to use, avoid, or work around technology based on a set of perceptions that form in real time.
When central IT systems feel difficult, slow, unpredictable, or risky, people instinctively look for alternatives.
TTAT identifies the key perceptions that drive that behavior:
1. Perceived Susceptibility
“How vulnerable will I be if I stick to the official process?”
In higher education, this often sounds like:
“If I wait for IT, I’ll miss my accreditation deadline.”
“If procurement takes eight weeks, my grant expires.”
“If we don’t fix this now, students will suffer.”
The more vulnerable someone feels, the more they look for immediate solutions.
2. Perceived Severity
“How serious are the consequences if I don’t act?”
Faculty, advisors, researchers, and administrators often work under high-stakes pressure:
grant funding
compliance audits
student success metrics
accreditation requirements
operational deadlines
When consequences feel severe, people will choose any tool that helps them move forward.
3. Perceived Effectiveness
“Will the official tool actually solve my problem?”
If the answer feels uncertain or negative, the likelihood of Shadow IT increases dramatically.
4. Perceived Barriers
“How hard will the official process be compared to the alternative?”
Barriers include:
unclear intake processes
long queues
slow approvals
rigid systems
complex training requirements
fear of being told “no”
If the path feels hard, people simply won’t take it.
5. Self-Efficacy
“Do I feel capable using the official tools?”
If not, Shadow IT fills the gap with something that feels familiar or intuitive.
When These Perceptions Misalign, Shadow IT Emerges
TTAT shows that Shadow IT is not caused by:
malice
defiance
a desire to break rules
It is caused by a misalignment between institutional processes and individual pressures.
When the official tools feel risky, slow, or uncertain — or when the consequences of waiting feel too severe — people will find another way.
Shadow IT is the natural outcome of these perceptions. Not a moral failure. Not a governance failure. A behavioral response to institutional friction.
Why TTAT Matters for Higher Education Leaders
Understanding TTAT gives leaders a roadmap for reducing Shadow IT by addressing the real drivers of user behavior.
Institutions that successfully reduce Shadow IT don’t rely on enforcement.
They focus on:
Lowering perceived barriers
Clear intake processes, transparent timelines, predictable governance.
Strengthening perceived effectiveness
Ensuring official tools actually meet the needs of teaching, learning, and research.
Increasing self-efficacy
Training, support, documentation, and communication that empower rather than intimidate.
Reducing susceptibility and severity
Showing users that working with IT reduces risk and increases their ability to succeed.
When these perceptions shift, behavior shifts with them.
Shadow IT declines — naturally.
Not because it was crushed,but because it was no longer necessary.
TTAT Is the Missing Framework Behind Shadow IT
TTAT doesn’t just explain why Shadow IT happens.It gives institutions a way to respond with:
empathy
intelligence
transparency
alignment
trust
partnership
It allows leaders to see that Shadow IT is a map of pressure points — a diagnostic tool that reveals where governance must evolve.
It brings the entire series full circle:
Shadow IT is not the enemy. It is information. And TTAT helps leaders read it.
What Comes Next
This concludes the five-part Shadow IT Leadership Series.
If you missed any post — or if you’d like to see the expanded versions — you can read the full series here:
Comments