Information Security Management Issues in a Cloud-based environment

摘要

There is a critical need to ensure users that information stored in cloud is more secure and accessible. This is in addition of showing to them that cloud computing environment provide methods for establishing and maintaining the integrity of information as well as its availability and its processing. Much as there are many advantages of deploying services in the cloud, there are numerous information security issues associated with it since it encompasses many technologies including networks, databases, operating systems, and people. The major objective of this study was to identify these issues and to develop an information security management framework for cloud based environment. From related literature, relevant issues were identified using textual analysis and grouped into six categories of; organizational, environmental, contingency management, security policy, internal control, and information and risk management. These issues were validated in a framework by using the analytical hierarchical process (AHP) method. Results of the study indicated that, environmental issues play a critical role in the information security management as compared to other issues whereas the information and risk management issues were found not to be so significant. This study contributes to the information security management body of knowledge by providing a single empirically validated framework that will be used theoretically to extend research in the domain of this study and practically by management while making decisions relating to security management in cloud computing.