You said "Shadow IT results in the double trouble of higher risk and cost from a weaker ability to enforce compliance and best practices when users stray to acquire their own IT services."

CIOs who think that they can mandate a punitive response to the Shadow IT phenomenon should think again. Line of Business leaders who take the initiative and deploy SaaS solutions, for example, have done so out of desperation. They don't choose to become malcontent employees.

That being said, a unified infrastructure management solution deployment needs to acknowledge the policy mistakes that led to the current demand for a hybrid IT environment. I see workload assignment, via public or private cloud, becoming more of a meritocracy -- where you *earn* the right to host the application. There is no de facto entitlement.

My point: perhaps IT organization that find themselves too focused on enforcing *compliance* would be wise to think more about the root causes of their current dilemma.