Exploring Critical Risks Associated with Enterprise Cloud Computing

While cloud computing has become an increasingly hot topic in the industry, risks associated with the adoption of cloud services have also received growing attention from researchers and practitioners. This paper reports the results of a study that aimed to identify and explore potential risks that organisations may encounter when adopting cloud computing, as well as to assess and prioritise the identified risks. The study adopted a deductive research method based on a cross-sectional questionnaire survey. The questionnaire was distributed to a group of 295 carefully selected and highly experienced IT professionals, of which 39 (13.2 %) responses were collected and analysed. The research findings identified a set of 39 cloud computing risks, which concentrated around diverse operational, organisational, technical, and legal areas. It was identified that the most critical risks were caused by current legal and technical complexity and deficiencies associated with cloud computing, as well as by a lack of preparation and planning of user companies.

[1]  Miguel Baptista Nunes,et al.  Establishing and Verifying a Risk Ontology for Surfacing ERP Post-Implementation Risks , 2013 .

[2]  Omkhar Arasaratnam,et al.  Introduction to Cloud Computing , 2011 .

[3]  José Miguel Baptista Nunes,et al.  Surfacing ERP exploitation risks through a risk ontology , 2009, Ind. Manag. Data Syst..

[4]  Rajkumar Buyya,et al.  Cloud Computing Principles and Paradigms , 2011 .

[5]  A. Field.  Discovering statistics using SPSS : (and sex, drugs and rock'n' roll) , 2005 .

[6]  Lee Gillam,et al.  Cloud Computing, Principles, Systems and Applications , 2010, Cloud Computing.

[7]  Ian Sommerville,et al.  Cloud Migration: A Case Study of Migrating an Enterprise IT System to IaaS , 2010, 2010 IEEE 3rd International Conference on Cloud Computing.

[8]  Tim Mather,et al.  Cloud Security and Privacy - An Enterprise Perspective on Risks and Compliance , 2009, Theory in practice.

[9]  Subhajyoti Bandyopadhyay,et al.  Cloud computing - The business perspective , 2011, Decis. Support Syst..

[10]  Markus Jakobsson,et al.  Controlling data in the cloud: outsourcing computation without outsourcing control , 2009, CCSW '09.

[11]  S Richardson.  Quantitative data analysis with SPSS 12 and 13: A guide for social scientists , 2005 .

[12]  D. M. Hutton,et al.  Cloud Computing: Principles, Systems and Applications , 2011 .

[13]  Harit Shah,et al.  Security Issues on Cloud Computing , 2013, ArXiv.

[14]  José Miguel Baptista Nunes,et al.  Identification and assessment of risks associated with ERP post-implementation in China , 2009, J. Enterp. Inf. Manag..

[15]  Mohd Syazwan Abdullah,et al.  Ontology-Based Applications for Enterprise Systems and Knowledge Management , 2012 .

[16]  Syed M. Rahman,et al.  An Overview of the Security Concerns in Enterprise Cloud Computing , 2011, ArXiv.

[17]  Miguel Baptista Nunes,et al.  Risks affecting ERP post‐implementation , 2011 .

[18]  Andy Field,et al.  Discovering statistics using SPSS: and sex and drugs and rock 'n' roll, 3rd Edition , 2009 .