Clustering goal-driven security factors for protecting data in cloud storage using Exploratory Factor Analysis (EFA): an empirical study

摘要

The purpose of this paper is to explore the important security factors for protecting data in cloud storagefrom the perspective of security practitioners. The study consist of 43 security variables (or indicator items)from a survey participated by security practitioners in Malaysia. Exploratory factor analysis (EFA) isconducted to understand the clusters of variables (or indicator items) and the inter-relationships constructingthe security factors (or components). Most of the respondents are from public sector organisations(government and higher education organisations) in Malaysia. The clusters of variables resulting from thisanalysis can be used as a reference for security practitioners planning to produce security policies to protectdata stored in a cloud storage. The top security factors identified from this study are shown in terms ofpolicy implementation and controls in confidentiality, integrity, availability, non-repudiation, authenticity,reliability, accountability and auditability of data services in cloud storage.