Risk perception and risk management in cloud computing: Results from a case study of Swiss companies

International Journal of Information Management

Volumn 33, Issue 5, 2013, Pages 726-733

  Brender, Nathalie ^a   Markov, Iliya ^a  

^a Battelle Geneva Research Center   (Switzerland)

Author keywords

Cloud computing; Empirical results; Risk management; Small and medium enterprises (SMEs); Swiss based enterprises

Indexed keywords

CLOUD COMPUTING; DISTRIBUTED DATABASE SYSTEMS; REGULATORY COMPLIANCE; RISK ASSESSMENT; RISK PERCEPTION; SECURITY OF DATA; WEB SERVICES;

CLOUD SERVICES; CONTROL ANALYSIS; DEGREE OF RISKS; DESIGN AND IMPLEMENTS; DISASTER RECOVERY; EMPIRICAL RESULTS; LARGE ENTERPRISE; SMALL AND MEDIUM ENTERPRISE;

RISK MANAGEMENT;

EID: 84879116782     PISSN: 02684012     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.ijinfomgt.2013.05.004     Document Type: Article

References (24)

1. Biswas, S. (2011a, January). Is cloud computing secure? Yes, another perspective [web log post]. Retrieved from http://www.cloudtweaks.com/2011/01/ the-question-should-be-is-anything-truly-secure (accessed on 25.01.12).
2. Biswas, S. (2011b, January) Computing without borders - What works, what doesn't [web log post]. Retrieved from http://www.cloudtweaks.com/2011/01/ computing-without-borders-what-works-what-doesn%E2%80%99t (accessed on 25.01.12).
3. M. Carroll, A. van der Merwe, and P. Kotzé Secure cloud computing: Benefits, risks and controls Paper presented at the 10th Annual Information Security for South Africa (ISSA) Conference Johannesburg, South Africa 2011, August Retrieved from http://ieeexplore.ieee.org/xpls/abs-all.jsp?arnumber= 6027519
4. Cloud Security Alliance Top threats to cloud computing v1.0 2010 Retrieved from https://cloudsecurityalliance.org/topthreats/csathreats.v1.0.pdf
5. Cloud Security Alliance Security guidance for critical areas of focus in cloud computing v3.0 2011 Retrieved from https://cloudsecurityalliance.org/ research/security-guidance
6. P. Cunningham Three cloud computing risks to consider. Information security magazine 2009, June Retrieved from http://www.arma.org/press/armanews/ infosecurity.pdf
7. M. Douglas, and A. Wildavsky Risk and culture: An essay on the selection of technological and environmental dangers 1983 Univ. of California Press Berkeley, Los Angeles
8. European Network and Information Security Agency An SME perspective on cloud computing: A survey 2009 Retrieved from http://www.enisa.europa.eu/ activities/risk-management/files/deliverables/cloud-computing-sme-survey
9. European Network and Information Security Agency Cloud computing: Benefits, risks and recommendations for information security 2009 Retrieved from http://www.enisa.europa.eu/activities/risk-management/files/deliverables/cloud- computing-risk-assessment
10. Gartner, Inc. (2012). Gartner says worldwide cloud services market to surpass $109 billion in 2012. http://www.gartner.com/newsroom/id/2163616.
11. A. Hawser Cloud control Global Finance 23 11 2009 59 61 Retrieved from http://web.ebscohost.com/ehost/detail?vid=4hid=122sid=a0d05076-aae5-4452-83fd- b918d578dee0%40sessionmgr11bdata=JnNpdGU9ZWhvc3QtbGl2ZQ%3d%3d#db=buhAN=47598230
12. J. Heiser, and M. Nicolett Assessing the security risks of cloud computing 2008 Gartner Research Stamford, CT Retrieved from http://cloud.ctrls. in/files/assessing-the-security-risks.pdf
13. J.L. Heskett, W.E. Sasser Jr., and C.W.L. Hart Service breakthroughs: Changing the rules of the game 1990 Free Press New York
14. Information Systems Audit and Control Association 2010 ISACA IT risk/reward barometer - US edition 2010 Retrieved from http://www.isaca.org/ About-ISACA/Press-room/Documents/2010-ISACA-Risk-Reward-Barometer-Results-US.pdf
15. L.M. Kaufman Data security in the world of cloud computing IEEE Security & Privacy 7 4 2009 61 64 Retrieved from http://ieeexplore.ieee.org/search/ srchabstract.jsp?tp=arnumber=5189563openedRefinements%3D* %26filter%3DAND%28NOT%284283010803%29%29%26searchField%3DSearch+All%26queryText %3DData+Security+in+the+World+of+Cloud+Computing
16. P. Mell, and T. Grance The NIST definition of cloud computing: Recommendations of the National Institute of Standards and Technology 2011 Retrieved from http://csrc.nist.gov/publications/nistpubs/800-145/SP800-145.pdf
17. OneStopClick Mobile & remote working in 2011: An overview of cloud services for today's SMEs 2011 Retrieved from http://hosting.onestopclick.com/ white-papers/129/mobile-remote-working-in-2011-an-overview-of-cloud-services- for-today%E2%80%99s-sme.html
18. K. Popovic, and Z. Hocenski Cloud computing security issues and challenges Proceedings of the 33rd International Convention MIPRO 2010 344 349 Retrieved from http://ieeexplore.ieee.org/stamp/stamp.jsp?tp=arnumber=5533317
19. S. Prakash Risk management: Cloud computing considerations. Canadian Management Accounting 2011, March/April Retrieved from http://www.nxtbook.com/ nxtbooks/naylor/SMAS0211/index.php#/40
20. R.L. Scheier What to do if your cloud provider disappears 2009 Retrieved from http://www.infoworld.com/d/cloud-computing/what-do-if-your-cloud-provider- disappears-508?page=0,3
21. N.A. Sultan Reaching for the "cloud": How SMEs can manage International Journal of Information Management 31 2011 272 278 Retrieved from http://web.ebscohost.com/ehost/detail?vid=7hid=9sid=a0d05076-aae5-4452-83fd- b918d578dee0%40sessionmgr11bdata=JnNpdGU9ZWhvc3QtbGl2ZQ%3d%3d#db=buhAN=59953059
22. N.A. Sultan Cloud computing in education: A new dawn? International Journal of Information Management 30 2010 109 116
23. Treasury Board of Canada Secretariat Guidance on preparing information sharing agreements involving personal information 2010 Retrieved from http://www.tbs-sct.gc.ca/atip-aiprp/isa-eer/isa-eer01-eng.asp
24. M. Zekrya Le cloud computing en Suisse: Résultats de l'enquête auprès des entreprises: Course notes [PowerPoint slides] 2011, November Haute Ecole de Gestion Geneva