In every company, alongside the formal systems, there exists a parallel system of informal processes that actually make the organisation function.
WhatsApp groups where real decisions are communicated, debated and approved. Personal spreadsheets that track what the ERP cannot. Informal escalation chains where the documented escalation path is too slow or politically unnavigable. The founder’s phone call that overrides the approval process. The sales director’s personal notebook that contains customer intelligence the CRM does not capture. The accountant’s desktop file that reconciles what the system cannot.
This shadow system is not a failure of discipline. It is the organisation’s honest adaptation to the gap between what formal systems can do and what the business actually requires. When the ERP cannot produce a report the board needs, someone builds a spreadsheet. When the approval process is too slow, someone sends a WhatsApp. When the CRM does not capture what matters, someone writes it in a notebook.
Why the Shadow System Matters
The shadow system works. It is also undocumented, uncontrolled, unauditable and dependent on specific individuals. When the person who maintains the spreadsheet leaves, the information is lost. When the WhatsApp message is not in the formal record, the audit trail is broken. When the founder’s phone call overrides the process, the control environment is compromised without anyone recording the override.
The shadow system creates three specific risks:
People dependency. The shadow system’s knowledge and processes reside in individuals, not in the organisation. The company’s actual operating capability is contingent on specific people continuing to perform specific informal functions that no one else knows about.
Control weakness. Decisions made through informal channels bypass the controls that formal channels enforce. An approval communicated via WhatsApp may never reach the financial system as a documented authorisation.
Information loss. Data that exists only in personal spreadsheets, notebooks and undocumented processes is not available to the organisation when the individual is absent, and is permanently lost when they leave.
The Shadow System Audit
In Northrop Management's forensic and governance work, the shadow system audit is a diagnostic that reveals the gap between the formal architecture and the actual operating reality.
The methodology: interview process owners at every level, asking not how the process is supposed to work (the documented answer) but how it actually works (the practised answer). Map every informal workaround, personal tracker, undocumented communication channel and unofficial escalation path. Then assess each for risk (what happens if the person maintaining it is unavailable) and information value (what data does it contain that the formal system does not).
The output is not a list of problems. It is a map of the organisation’s real information architecture, which is almost always more revealing than the documented one.
Ashish Chaudhary, frames the observation directly: “The shadow system tells you what the formal system cannot do. Instead of eliminating the shadow system, which is the instinctive governance response, fix the formal system so the shadow system is no longer necessary. The shadow system is the organisation’s honest feedback about its own infrastructure.”
Questions for the Boardroom
1. How many critical business processes currently depend on personal spreadsheets, notebooks or informal communication channels?
2. If the three people who maintain the most important shadow systems were simultaneously unavailable, what would break?
3. Is there information in informal systems that the board should be seeing but currently cannot, because it is not captured in the formal reporting?
4. Have we assessed which shadow processes exist because the formal systems are inadequate, versus which exist because of individual preference?
5. What would it cost to upgrade the formal systems to eliminate the need for the five most critical shadow processes?
Closing Implication
The shadow system is the organisation’s honest feedback about its own infrastructure. A board that sees only the formal architecture sees the aspirational version of how the company operates. A board that understands the shadow system sees the real version. The gap between the two is the gap between documented governance and actual governance.
