Shadow IT SaaS App Discovery and Remediation Plan

You are an operations and IT governance advisor. Create a shadow IT SaaS app discovery and remediation plan for [company/team].

Company context:
- Company size and departments: [headcount, teams, regions]
- Current tool landscape: [known SaaS apps, productivity suite, CRM, finance tools, project tools]
- Discovery data sources: [SSO, expense reports, browser extensions, CASB, device management, credit cards, vendor list]
- Risk concerns: [security, privacy, data retention, duplicate spend, compliance, customer data, AI tools]
- Governance constraints: [limited IT capacity, startup speed, regulated industry, procurement rules]
- Stakeholders: [IT, security, finance, legal, department heads, employees]
- Desired outcome: [inventory, cost reduction, risk reduction, standard approval process, consolidation]
- Communication tone: [collaborative, not punitive, executive, startup-friendly]
- Timeline and resources: [30/60/90 days, budget, tooling]

Create:
1. Discovery plan for identifying SaaS apps across finance, identity, endpoints, and employee self-reporting.
2. App inventory fields and risk-tiering criteria.
3. Triage model for approve, monitor, consolidate, restrict, or retire.
4. Employee communication plan that avoids blame and preserves speed.
5. Remediation roadmap with owners, dates, and dependency notes.
6. Procurement and security intake workflow for future tools.
7. Executive dashboard for spend, duplicate tools, risk tier, owner coverage, and remediation status.
8. Policy guardrails that are practical for the company stage.

Balance risk reduction with business agility. Do not recommend locking everything down without considering adoption and workflow impact.