When security creates friction, employees find workarounds
Employee workarounds, often driven by security friction, pose a significant risk to businesses, particularly with the rise of AI adoption. A "Digital Friction Report" indicates that 40% of employees worldwide admit to using personal devices or apps to bypass work technology issues, with India at 66% and Japan at 22% among surveyed APAC nations.
The article establishes a direct link between workplace security measures that hinder productivity and the emergence of "Shadow AI" and other unsanctioned workarounds. This behavior, while usually not malicious, creates hidden vulnerabilities by pushing work into unmanaged environments, making it impossible for organizations to govern or secure. The core issue is that security controls are often not designed around actual employee workflows, leading to policy and design failures.
The cost of this friction is substantial, with the research finding that 80% of people globally lose time to broken IT, averaging 1.3 workdays a month. Across APAC, India reports the highest time loss at 1.9 days per month, while Japan reports the least, at under a day. This illustrates how daily frustrations can escalate into significant business problems, delaying projects and eroding trust in official workplace technology.
Addressing Shadow AI requires a shift from viewing it purely as a technology problem to recognizing it as a symptom of misaligned security, governance, and employee experience. Businesses need to integrate AI governance into their operating models, provide clear guidance on approved tools, and adopt a "security-by-design" approach. This means bringing security into the conversation earlier, making the secure option the easiest, and fostering trust in IT teams, which 57% of workers reportedly do not trust to resolve issues quickly or effectively.
Share this article
Related reading
6 stories
Rising AI Security Incidents Raise Safety Concerns for Major Tech Firms
The rise of Shadow AI and unsanctioned workarounds directly contributes to the AI security incidents we previously covered.

Climate or debt? Between the devil and deep blue sea

When persuasion begins to erode trust

New logic of modern data center

