I feel like we are (not so) slowly losing control of our environment as SaaS vendors go over our IT dept's heads to market shit directly to our users. Microsoft has created an environment in which this is the norm now. We have to always be proactively blocking everything or training users not to use it, and our policy admin and training folks can't keep up. Our organization is just too small to have the resources to keep a lid on that shit. Our own SW vendors are our top threat model and an APT.