---
date: 2022-05-16
description: "The inevitability of low-code/no-code platforms in enterprise settings\
  \ necessitates a robust strategy for managing their associated security risks. As\
  \ citizen development proliferates\u2014predicted to outnumber professional developers\
  \ 4:1\u2014CISOs must adapt their frameworks to include governance structures that\
  \ address vulnerabilities inherent in decentralized app development. The common\
  \ infiltration paths include top-down approaches via Centers of Excellence, bottom-up\
  \ shadow IT practices, and SaaS vendor integrations. This shift emphasizes the urgent\
  \ need for security teams to establish visibility and guidelines for citizen developers\
  \ to safeguard critical business operations and data from potential exploitation."
link: /archive/2022-05-16-you-can-t-opt-out-of-citizen-development
tags:
- Citizen Development
- Enterprise Applications
- Cloud Security
- Low-Code Development
- Cybersecurity
- weblog
title: You Can't Opt Out of Citizen Development
type: weblog
---
{% raw %}

To see why low-code/no-code is inevitable, we need to first understand how it finds its way into the enterprise.

{% endraw %}