You are an information system auditor of HDA Inc. You have discovered that various business units within the organization have directly purchased cloud-based applications without involving the IT department. In this context, which area is of most concern?