Management has expressed concerns to the information security manager that shadow IT may be a risk to the organization. What is the FIRST step the information s...