Security Risk Issues And Controls For Cloud Computing In Iraqi Government Organisations

• Main Author: Al-Zaidi., Qusay Kanaan Kadhim
• Format: Thesis
• Language: English; English
• Published: 2019
• Subjects: T Technology (General); TK Electrical engineering. Electronics Nuclear engineering
• Online Access: http://eprints.utem.edu.my/id/eprint/24855/1/Security%20Risk%20Issues%20And%20Controls%20For%20Cloud%20Computing%20In%20Iraqi%20Government%20Organisations.pdf; http://eprints.utem.edu.my/id/eprint/24855/2/Security%20Risk%20Issues%20And%20Controls%20For%20Cloud%20Computing%20In%20Iraqi%20Government%20Organisations.pdf; http://eprints.utem.edu.my/id/eprint/24855/; https://plh.utem.edu.my/cgi-bin/koha/opac-detail.pl?biblionumber=117107

Cloud computing is becoming increasingly important in Information Technology (IT) as an enabler for improved productivity, efficiency and cost reduction. It is expected to offer benefits for public sector organisations and government agencies. Cloud computing has the potential to improve the reliability and scalability of IT systems, which in tum allows organisations such as Iraqi governments to focus on their core business and strategy development and implementation. However, governments are still hesitant to adopt cloud computing because of fear for the confidentiality of their data. There are risks and barriers in adopting cloud computing in the Iraqi government whereby the top risk is security. Security issues, classified as the biggest concern, affect the growth of cloud computing technology of Iraqi government organisations. Therefore, this thesis aimed to investigate the Security Risk Issues (SRIs) that affect cloud computing adoption by the Iraqi government organizations. It also intends to investigate the Security Risk Controls (SRCs) that enhance the cloud computing adoption through mitigating the effect of SRIs. Mixed-methods were used to carry out the objectives of this thesis involving two steps; using qualitative and quantitative methods for the initial experiment and the quantitative and intelligent approach methods for the experimental stage. Based on the qualitative and quantitative method, 26 SRIs under 5 domains and 26 SRCs to mitigate the 5 domains were determined that affected the adoption of cloud computing in the Iraq government organisations. The quantitative and intelligent approach methods used in the experimental stage were to develop a conceptual framework security risk management process for identifying the best quality and most accurate SRCs for the 5 domains. In short, the results showed that 26 SRCs mitigate the 5 domains using three intelligent approaches namely SVMR, ANNPSO, ANFIS for easing the cloud computing adoption in the Iraq government organisations. This thesis produced a validated and an effective conceptual of security risks and controls for cloud computing.