Missing cloud security awareness: investigating risk exposure in shadow IT

2017 ◽  
Vol 30 (4) ◽  
pp. 644-665 ◽  
Author(s):  
Marc Walterbusch ◽  
Adrian Fietz ◽  
Frank Teuteberg

Purpose On account of its easy and intuitive usage as well as obvious advantages (e.g. access to work data from anywhere, at any time and through any means) the evolutionary cloud computing paradigm favors the use of shadow IT. Since many employees are not aware of the associated risks and possible legal violations, unauthorized use of cloud computing services could result in substantial risk exposure for any company. The purpose of this paper is to explore and to extend the body of knowledge concerning the topic of cloud computing with regard to shadow IT. Design/methodology/approach The aim of this contribution is to identify the reasons for the use of cloud computing services and the resulting shadow IT from an employee’s perspective, to demonstrate the counteractions a company may take against the unauthorized use of cloud computing services and to elaborate on the inherent opportunities and risks. We follow a mixed-methods approach consisting of a systematic literature review, a cloud computing awareness study, a vignette study and expert interviews. Findings Based on a triangulation of the data sets, the paper at hand proposes a morphological box as well as a two-piece belief-action-outcome model, both from an employee’s and employer’s point of view. Our findings ultimately lead to recommendations for action for employers to counteract the risk exposure. Furthermore, also employees are sensitized by means of insights into the topic of unauthorized usage of cloud computing services in everyday working life. Research limitations/implications The limitations of the triangulation reflect the limitations of each applied research method. These limitations justify why a mixed-methods approach is favored – rather than relying on a single source of data – because data from various sources can be triangulated. Practical implications The paper includes recommendations for action for the handling of the unauthorized usage of cloud computing services within a company, e.g., the set up of a company-wide cloud security strategy and the conduction of an anonymous employee survey to identify the status quo. Originality/value This paper fulfills an identified need to explore the usage of cloud computing services within the context of shadow IT.

Info ◽  
2015 ◽  
Vol 17 (1) ◽  
pp. 54-67 ◽  
Author(s):  
Joseph Kwame Adjei

Purpose – The purpose of this paper is to explain the role of trust in cloud computing services based on empirical evidence from interviewing executives of financial institutions in Ghana. The paper answers the questions: what is the role of trust in cloud computing service acquisition, and what policies promote trusted cloud computing services? Design/methodology/approach – This is an explanatory paper that is based on literature review and empirical data on exploring reasons for cloud computing service acquisitions. A combination of interviews and focus group discussions was used as methods for data collection. Information technology and electronic banking executives of five major commercial banks in Accra, Ghana, between January and July 2013 were interviewed. A total of ten respondents were interviewed, two in each of the selected banks. A purposive sampling technique was used in the selection of informants. This approach allows the selection of qualified informants to ensure extensiveness and diversity of opinion. Findings – Although previous literature proffers various factors as key to cloud computing adoption, uses or provisioning, this study brings trust to the fore as an imperative for cloud computing service acquisition by financial institutions. It also shows that trust increases if users perceive that cloud computing service providers act in honesty and in users’ interest, making trust a fundamental factor that informs financial institutions’ decision to acquire cloud computing services. Research limitations/implications – The research introduces a new dimension about the widely held perceptions of the factors that influence adoption of cloud computing services. Practical implications – Developers of cloud computing solutions that are targeted at corporate users must focus on systems that enhances their trustworthiness, as it is a primary criteria for user buy-in. Similarly, any trust-building effort by cloud computing service providers minimizes users’ concerns and pushes the services providers closer to the trust threshold. Originality/value – The paper outlines the trust factors that are imperative for cloud computing uses by financial institutions. This is one of the pioneering papers that address trust issues in cloud computing from the perspective of financial institutions.


2019 ◽  
Vol 35 (10) ◽  
pp. 15-17

Purpose This paper aims to review the latest management developments across the globe and pinpoint practical implications from cutting-edge research and case studies. Design/methodology/approach This briefing is prepared by an independent writer who adds their own impartial comments and places the articles in context. Findings This research paper concentrates on factors that determine the propensity of large and small European companies to adopt cloud computing services. The results demonstrate that companies of all sizes can benefit from CC as a strategic vehicle for reducing ICT costs, for achieving product/service innovation, and to save costs on their sophisticated administrative systems. Furthermore some additional factors apply only to small companies. Originality/value The briefing saves busy executives, strategists and researchers hours of reading time by selecting only the very best, most pertinent information and presenting it in a condensed and easy-to-digest format.


2021 ◽  
Vol ahead-of-print (ahead-of-print) ◽  
Author(s):  
Maryam Loghmani Khozani ◽  
Hassan Behzadi ◽  
Mohsen Nowkarizi ◽  
Fatemeh Shafiee Neizar

PurposeThe purpose of this study was to investigate the views of librarians in Iran academic libraries about the extent of their familiarity, application and knowledge of the cloud computing in libraries.Design/methodology/approachThis was a survey research. The statistical population of research consisted of librarians working in five universities in northeastern Iran. The sample (83 librarian) selected by using random sampling method.FindingsThe findings showed that in 2019 librarians familiar with cloud computing was low, but their use of cloud computing services was moderate. Also the findings showed that the item of providing enough computers in the library had the lowest effect on promoting the use of cloud computing and the items. Cloud computing training for librarians and users and broadband Internet were best strategies offered by librarians to promote the use of cloud computing.Originality/valueCloud computing has received less attention from librarians and researchers. However, based on the results of the present study, the broader use of cloud computing in libraries requires specialized and trained staff. Librarians need to broaden their knowledge in this technology.


2015 ◽  
Vol 28 (6) ◽  
pp. 788-807 ◽  
Author(s):  
Anabel Gutierrez ◽  
Elias Boukrami ◽  
Ranald Lumsden

Purpose – The purpose of this paper is to determine the factors influencing managers’ decision to adopt cloud computing in the UK using the “Technology-Organisation-Environment” (TOE) framework. Design/methodology/approach – Data were collected through a self-created questionnaire based survey that was completed by 257 mid-to-senior level decision-making business and information technology (IT) professionals from a range of UK end-user organisations. The derived hypotheses were tested using various data analysis techniques including principal component analysis and logistic regression. Findings – The results show that four out of the eight factors examined have a significant influence on the adoption decision of cloud computing services in the UK. Those key factors include competitive pressure, complexity, technology readiness and trading partner pressure. The latter predictor; trading partner pressure, was the most significant factor for the adoption decision of cloud services reflecting organisations’ concerns on legal regulations, co-creation and customisation, service linkage and vendor locking which adds complexity to the process of selecting an appropriate vendor. Research limitations/implications – This research found trading partners (cloud service providers) significantly influence managers’ decisions to adopt cloud services, however, further research is required to fully understand all the aspects involved especially with the growing number of vendors available. Although over 250 usable responses to the questionnaire were received and analysed, there was not a sufficient quantity of responses from each industry sector or organisation size to conduct further analysis. Practical implications – The findings reveal the important role of cloud computing service providers to enable end-users to better evaluate the use of cloud computing. It also reveals that top management support is no longer a driver as organisations are starting to adopt cloud computing services on the basis of cheaper and more agile IT resources in order to support business growth. Originality/value – This research provides original insight for cloud computing adoption within the UK from a managerial perspective.


2015 ◽  
Vol 10 (1) ◽  
pp. 80-97 ◽  
Author(s):  
Vanessa Ratten

Purpose – The purpose of this paper is to examine the different factors affecting purchase intention of cloud computing services in Turkey and the USA. Design/methodology/approach – A research framework is developed based on social cognitive theory and the technology acceptance model. A survey questionnaire is used based on student responses in Turkey and the USA to see if there are any differences toward purchase intentions. Findings – A majority of the research hypotheses are supported in both the Turkish and USA sample indicating that there are similarities in perceived ease of use, perceived usefulness, consumer innovation and performance expectancy toward cloud computing. Research limitations/implications – The findings of this research have implications for technology companies and marketers operating in North America, Europe and Asia. Practical implications – As few studies exist on the differences between purchase intention of technological innovations in the USA and Turkey, this paper contributes to a better understanding of whether cultural differences or consumer attitudes effect adoption of emerging technologies including cloud computing services. Originality/value – This paper focusses on the emerging technological innovation of cloud computing services by examining antecedent environmental factors influencing purchase intention. In total, two different country samples are utilized to gain a better international perspective of the reasons why consumers purchase technological innovations.


2021 ◽  
Vol ahead-of-print (ahead-of-print) ◽  
Author(s):  
Dayu Wang ◽  
Daojun Zhong ◽  
Liang Li

PurposeInformation technology infrastructure library (ITIL) is a commonly utilized IT service management execution technique that helps IT services to be planned, designed, selected, operated and continuously improved. ITIL procedures are utilized to measure the efficiency of IT service management procedures and their association with the accelerated system development of cloud systems. The challenges faced in IT deployment and maintenance management significantly restrict cloud computing services' reliability. Therefore, this article aims to review a comprehensive study of the role of cloud computing on the ITIL processes.Design/methodology/approachEach enterprise strives to stay competitive in the market and offers the services its consumers are looking for, all in line with cost-effectiveness and client needs. The ITIL framework provides best practice guidance for IT service management that includes a collection of ample publications supplying detailed guidelines on the management of IT functions, processes, responsibilities and roles associated with IT service management. On the other hand, the way companies employ IT services with an effect on the role of enterprise infrastructure is altered by cloud computing. Hence, the investigation makes utilization of a systematic literature review (SLR) detailing crucial success factors of cloud computing execution in ITIL. The authors have recognized 35 valuable contributions, providing a comprehensive view of study in this field, of which 22 papers were found according to some filters that have been analyzed in this article. Selected articles are presented in two groups, including cloud service and cloud service providers.FindingsOwing to the overall expense of execution and problems with combining the ITIL approach with the existing organizational IT strategic strategy, ITIL adoption has begun to wane over the last few years. An established methodology for ITIL deployment that will assure long-term success for those wanting to use private cloud procurement will be the most important inference that can be taken from this article. ITIL offers a perfect platform to execute and support cloud applications effectively. IT will prevent cloud sprawl and instability, reduce the likelihood of service interruption and optimize customer loyalty by merging humans, procedures and technologies into hybrid environments.Research limitations/implicationsThis survey is more aimed at specialists such as IT experts; so, further evaluations must also be carried out in order to understand the company's views on the risks and advantages of adopting ITIL. In addition, non-English articles are not discussed in this article.Practical implicationsThe study outcomes would help suppliers of cloud computing services assess their service quality and ensure customer satisfaction with the quality of cloud computing services. The outcomes will also supply a reference for cloud infrastructure customers to assess and choose various kinds of cloud computing services.Originality/valueAn SLR with perspectives from ITIL professionals and business studies is the benefit of this report. By offering a more thorough framework that helps companies achieve efficiency, effectiveness and creativity in ITIL execution, this article would be useful for ITIL clients, decision-makers and developers.


2015 ◽  
Vol 6 (1) ◽  
pp. 25-36 ◽  
Author(s):  
Vanessa Ratten

Purpose – This paper aims to cross-culturally compare how consumers in China and Australia adopt cloud computing services. Cloud computing is one of the major innovation advances in information technology. In order for more consumers to adopt cloud computing as a technological innovation, there needs to be a better understanding of the issues involved in consumer adoption processes for online retailers. While there is an increasing amount of interest in cloud computing as a technological innovation, there is an important need to examine the reasons why consumers purchase cloud computing services for online retailers. Design/methodology/approach – In this paper, the technology acceptance model and social cognitive theory are identified as the theoretical frameworks to understand the consumer purchase intention of cloud computing services. A set of research hypotheses are stated from both theoretical frameworks to test their relationship with a consumer’s intention to adopt cloud computing as a technological innovation. These hypotheses focus on perceived usefulness, perceived ease of use, online behavioural advertising knowledge, social networks and online privacy concerns, which will help online retailers understand how cloud computing can be utilized by consumers to store and access online retail information. Findings – The findings of the study outline the different areas of technological innovation research that are needed to advance the information technology industry in the future. The findings suggest that perceived ease of use, perceived usefulness and online privacy concerns can determine a consumer’s intention to adopt cloud computing, but online behavioural advertising knowledge and social networks differ among consumers in different countries. Originality/value – The key issues influencing consumer adoption of cloud computing are outlined, which due to the emerging nature of this technological innovation will influence the regulation and marketing of cloud computing services by firms and governments in the technology sector.


2014 ◽  
Vol 6 (1) ◽  
pp. 53-71 ◽  
Author(s):  
Vanessa Ratten

Purpose – The purpose of this paper is to examine the effects of privacy concerns and consumer innovativeness towards consumer's adoption of a technological innovation in the form of cloud computing technology. Design/methodology/approach – A cross-cultural comparison between consumers in the USA and China is made through a study of consumers intending to adopt cloud computing services. A review of the technology innovation adoption literature forms the basis of the research propositions, which are based on the extant literature and focused on the innovative adoption behaviour of consumers. A comparative approach is taken to analyse the differences between US and Chinese consumers intending to adopt cloud computing services. Findings – Findings suggest that there are more similarities than differences between US and Chinese consumers adopting cloud computing services. The survey suggests that the performance expectancy, perceived usefulness and perceived ease of use can help predict intention to adopt cloud computing services in both the USA and China, but consumer innovativeness is a better indicator in the USA than in China for consumers adopting technological innovations. Practical implications – This paper is important for cloud service technology marketers by indicating how social influencers can influence consumer's usage of cloud computing by affecting their social network of friends and family. In addition, insight into how consumers adopt cloud computing by focusing on privacy concerns of personal information being shared can help future technology innovations enter the marketplace at a faster rate. Originality/value – This paper fills the gap in the current technology marketing and innovation literature on how consumers adopt technological innovations and highlights the importance of increasing the perceptions of performance expectation of service innovations.


2014 ◽  
Vol 6 (2) ◽  
pp. 170-188 ◽  
Author(s):  
Vanessa Ratten

Purpose – The aim of this paper is to focus on consumer’s perceptions of ethical and innovative aspects of cloud computing services. Cloud computing is a technological innovation that more consumers are adopting because of its mobility and accessibility in storing data. While there has been an increased awareness of cloud computing by consumers, there is limited research about the factors influencing consumers to purchase cloud services. Design/methodology/approach – This study uses the technology acceptance model and the social cognitive theory as the theoretical frameworks to understand how perceived ease of use, perceived usefulness, ethical self-efficacy, innovation self-efficacy, performance expectancy and privacy impact purchase intention of cloud computing services. Research hypotheses are developed from the literature and tested by a survey questionnaire in India and the USA. Findings – The results of the analysis suggest that consumers in India and the USA are affected by similar factors when deciding to purchase cloud computing services, but differ in expectations about performance. Originality/value – This study utilizes Indian and US consumers to compare purchase intentions of technological innovations showing that there are more similarities than differences towards ethical and consumer innovativeness in both countries.


2019 ◽  
Vol 119 (2) ◽  
pp. 351-366 ◽  
Author(s):  
Chinho Lin ◽  
Meichun Lin

Purpose It is necessary to determine the processes affecting cloud computing service applications in supply chain management (SCM) systems in order to facilitate cloud computing service exchanges and transmission of data among supply chain members. The paper aims to discuss these issues. Design/methodology/approach Drawing on the elaboration likelihood model (ELM) and integrating the commitment trust theory, this paper develops a theoretical model using argument advantage and source credibility constructs to examine the relationships among perceived usefulness, attitude, trust and usage intention. Findings The results indicate that both the central route and the peripheral route of the ELM have a positive influence on perceived usefulness. The argument advantage has a strong influence on perceived usefulness as compared to source credibility while source credibility has a strong impact on trust. Furthermore, the perceived usefulness of cloud computing services plays a pivotal role in attitude and intention, whereas trust has a weak effect on usage intention. Originality/value The proposed model not only explores the argument that potential user evaluations of both the advantages of cloud computing services and source credibility influence their affective states, which in turn affect their usage intention, but it also examines the mediating factors that influence processes related to cloud SCM acceptance.


Sign in / Sign up

Export Citation Format

Share Document