IRMA-International.org: Creator of Knowledge
Information Resources Management Association
Advancing the Concepts & Practices of Information Resources Management in Modern Organizations

Exploring Information Security Governance in Cloud Computing Organisation

Exploring Information Security Governance in Cloud Computing Organisation
View Sample PDF
Author(s): Hemlata Gangwar (National Institute of Industrial Engineering (NITIE), India)and Hema Date (National Institute of Industrial Engineering (NITIE), India)
Copyright: 2019
Pages: 19
Source title: Web Services: Concepts, Methodologies, Tools, and Applications
Source Author(s)/Editor(s): Information Resources Management Association (USA)
DOI: 10.4018/978-1-5225-7501-6.ch104

Purchase

View Exploring Information Security Governance in Cloud Computing Organisation on the publisher's website for pricing and purchasing information.

Abstract

The paper reveals factors impacting information security governance within the cloud computing technology implementation in organizations. Case study methodology was used and 15 semi-structured interviews were conducted with directors and information security professionals from 5 different types of organizations. The main component that were identified as playing a significant role in information security governance were: information security strategy, security policies and procedure, risk management and assessment program, compliance and standard, monitoring and auditing, business continuity and disaster recovery, asset management and access control and identity management. The results show that awareness through education and training of employees needs to be given very particular attention in cloud computing security. The paper does not include any end-user perspective in interviews and this end-user context is missing. Companies need to focus upon awareness through education and training of employees. Moreover, management and employee support is the critical component of the effective information security governance framework implementation. Also, organisations should develop their information security using a very precise and detailed planning process that ensures the right cloud computing acceptance by the users. The proposed information security governance framework offers organisations a holistic perspective for governing information security, and minimizes risk and cultivates an acceptable level of information security culture.

Related Content

Mohib Ullah, Arbab Waseem Abbas, Lala Rukh, Kamran Ullah, Muhammad Inam Ul Haq. © 2023. 25 pages.
Rafi Ullah Khan, Mohib Ullah, Bushra Shafi, Imran Ihsan. © 2023. 20 pages.
Rafi Ullah Khan, Mohib Ullah, Bushra Shafi. © 2023. 17 pages.
Shaukat Ali, Shah Khusro, Mumtaz Khan. © 2023. 34 pages.
Tayyaba Riaz, Iftikhar Alam. © 2023. 20 pages.
Ufuk Uçak, Gurkan Tuna. © 2023. 22 pages.
Muhammad Hamad, Altaf Hussain, Majida Khan Tareen. © 2023. 21 pages.
Body Bottom