StudyToCert

All certifications / CISA / Lessons

ISACA Certified Information Systems Auditor (CISA) 2024 job practice · Domain 4: Information systems operations and business resilience

End-user computing and shadow IT

▶ Watch the overview video

Last reviewed September 30, 2026 · Leer en español

End-user computing (EUC) means applications built or managed by business users rather than the IT function: spreadsheets with complex formulas and macros, desktop databases, reporting tools, scripts and low-code or no-code apps. EUC is valuable because it is flexible and fast, and business users know their needs best. The risk is that EUC often supports important decisions, pricing and financial reports without any of the controls applied to formal systems, such as testing, change control, access control and backup.

Free account

Keep reading for free

Create a free StudyToCert account to read the rest of this lesson: 7 more sections, 6 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.

Sign up free Log in

Study CISA for free
A week-by-week plan with every lesson, quizzes, checkpoint tests, a practice exam and hands-on labs.
Open the CISA study plan