A framework for critical security factors that influence the decision of cloud adoption by Saudi government agencies. Issue 7 (November 2017)

• Record Type: Journal Article
• Authors: Alassafi, Madini O.; Alharthi, Abdulrahman; Walters, Robert J.; Wills, Gary B.
• Is Part Of: Telematics and informatics. Volume 34:Issue 7(2017)
• Page Start: 996
• Page End: 1010
• Publication Date: 2017-11
• Subjects: Saudi government agencies -- Cloud adoption -- Cloud security risks -- Cloud security benefits; Telecommunication -- Periodicals; Computer networks -- Periodicals; Télécommunications -- Périodiques; Réseaux d'ordinateurs -- Périodiques; 384
• DOI: 10.1016/j.tele.2017.04.010
• Languages: English
• ISSNs: 0736-5853

Abstract

Highlights: First study to explore the security factors to adopt cloud computing in Saudi government agencies. It provides IT practitioners and cloud provider's experimental data that promote marketing cloud services. Focusses on government agencies institutions intending to adopt from legacy to use cloud-based system. Indicated security risk, social, and security benefits to be the most influencing factors. Abstract: Cloud computing technologies can play an essential role in public organisations and companies while it reduces the cost of using information technology services. It allows users to access the service anytime and anywhere, with paying for what they use. In developing countries, such as Saudi Arabia, the cloud computing is still not extensively adopted, compared to countries in the west. In order to encourage the adoption of cloud services, it is considerable to understand an important and particular complications regarding to cloud computing is the potential and perceived security risks and benefits posed by implementing such technology. This paper investigates the critical security factors that influence the decision to adopt cloud computing by Saudi government agencies. A framework was proposed for three categories, Social Factors category, Cloud Security Risks Category and Perceived Cloud Security Benefits that includes well-known cloud security features. The framework factors were identified by critically reviewing studies found in the literature together with factors from the industrial standards within the context of Saudi Arabia. An experiment study was conducted in five government agencies in Saudi Arabia by interview and questionnaire with experts in order to improve and confirm the framework. All the factors in the proposed framework were found to be statistically significant. An additional factor identified was Failure of client side encryption. Moreover, they suggested including this factor as a potential risk under Security Risk Factors Category. The initial framework was updated based on the expert reviews and questionnaires. The results were analysed via one-sample t -test with the data integrity analysed via Cronbach's alpha. The outcome indicated the majority of cloud security adoption framework categories were statistically significant. Potential future study directions and contributions are discussed.