This Brief lays out the lack of visibility and risk to the security of an enterprise represented by employee use of mobile devices and unauthorized cloud applications.