Improving Cloud Assurance and Transparency Through Accountability Mechanisms

The paper discussed the emerging technologies that can help address the challenges of trust in cloud computing. Cloud computing provides many opportunities for enterprises by offering a range of computing services. In today's competitive environment, the service dynamism, elasticity, and choices offered by this highly scalable technology are too attractive for enterprises to ignore. These opportunities, however, don't come without challenges. Cloud computing has opened up a new frontier of challenges by introducing a different type of trust scenario. Today, the problem of trusting cloud computing is a paramount concern for most enterprises. It's not that the enterprises don't trust the cloud providers' intentions; rather, they question cloud computing's capabilities.

Cloud computing is a vital change in the way we process and store data. Having data stored inside the cloud, it is not physically present on the user’s hard drive. Therefore he or she is no longer involved in the collection, processes, storage and disclosure of this data (Cavoukian, 2008). This makes the user more vulnerable, especially in the case of sensitive data (Onwubiko, 2010). The present survey tries to unravel the facets of trust in cloud services and the usage of a cloud storage service, Dropbox. Factors from the Technology Acceptance Model (TAM), privacy and security, reputation, and personal innovativeness were included in a research model and assessed with a questionnaire. The results of the questionnaire analysis show the importance of privacy and security as well as reputation in building trust. The TAM seems to be associated with trust and moderating the influence of trust on the usage of Dropbox. Finally, theoretical assumptions and practical implications of the findings are discussed highlighting the importance of trust in cloud computing and all fields of information system research.

Maintaining trust in cloud computing is a significant challenge due to the dynamic nature of cloud computing and the fragility of trust. Trust can be established by conducting successful transactions and meeting all the parameters of the Service Level Agreement (SLA) drawn up between two interacting parties. Trust can be maintained by continuous monitoring of these predefined SLA parameters. There are number of commentaries on SLA monitoring that describe different frameworks for the proactive or reactive detection of SLA violations. The aim of this research is to present an overview of the literature and make a comparative analysis of SLA monitoring in respect of trust maintenance in cloud computing.

Cloud accountability audits are promising to strengthen trust in cloud computing by providing reassurance about the processing data in the cloud according to data handling and privacy policies. To effectively automate cloud accountability audits, various distributed evidence sources need to be considered during evaluation. The types of information range from authentication and data access logging to location information, information on security controls and incident detection. Securing that information quickly becomes a challenge in the system design, when the evidence that is needed for the audit is deemed sensitive or confidential information. This means that securing the evidence at-rest as well as in-transit is of utmost importance. In this paper, we present a system that is based on distributed software agents which enables secure evidence collection with the purpose of automated evaluation during cloud accountability audits. We thereby present the integration of Insynd as a suitable cryptographic mechanism for securing evidence. We present our reasoning for choosing Insynd by showing a comparison of Insynd properties with requirements imposed by accountability evidence collection as well as an analysis how security threats are being mitigated by Insynd. We put special emphasis on security and privacy protection in our system analysis.

This paper analyzes Cloud Computing Impact on Inter-organizational Trust which affects the performance of Supply Chain Management of different Retail, Manufacturing, Financial, IT and Services firms in Karachi, city of Pakistan. A theoretical framework has been constructed that illuminates the role of Inter-organizational Trust in Cloud Computing (CC) and how this can reproduce the superior performance of Supply Chain (SCP) by using arguments of the Social Capital Theory (SCT). A questionnaire was run on 200 individuals having a different position like Senior Manager, Middle Manager and Officer of different Retail, Manufacturing, Financial, IT and Services firms in Karachi, state of Pakistan, and statistically analyze the hypothesis by step by step regression test. The result suggests that Cloud Computing (CC) would be controlled to support Inter-organizational Trust (IOT) to have a strong and significant influence on the association of Supply Chain. To improve complete Inter-organizational Trust (IOT) terms and conditions in organizations managers have to implement Cloud Computing base which creates radical improvement in Supply Chain Performance and the results, therefore, reinforce the across the board to explanation augured by the useful theoretical framework as Social Capital Theory (SCT).

The lack of confidence in entrusting sensitive information to cloud computing service providers (CSPs) is one of the primary obstacles to widespread adoption of cloud computing, as reported by a number of surveys. From the CSPs’ perspective, their long-term return-on-investment in cloud infrastructure hinges on overcoming this obstacle. Encryption and privacy protection techniques only solve part of this problem: in addition, research is needed to increase the accountability and auditability of CSPs. However, achieving cloud accountability is a complex challenge; as we now have to consider large-scale virtual and physical distributed server environments to achieve (1) real-time tracing of source and duplicate file locations, (2) logging of a file’s life cycle, and (3) logging of content modification and access history. This position paper considers related research challenges and lays a foundation towards addressing these via three main abstraction layers of cloud accountability and a Cloud Accountability Life Cycle.

Improving Security, Privacy, and Trust in Cloud Computing

Cloud computing is revolutionizing the cyberspace by enabling convenient, on-demand network access to a large shared pool of configurable computing resources (e.g., networks, servers, storage, applications, and services) that can be rapidly provisioned and released [1]. While cloud computing is gaining popularity, diverse security, privacy and trust issues are emerging, which hinders the rapid adoption of this new computing paradigm. However, the development of defense solutions is lagging behind. To identify the limitations of existing solutions and to envision the future research directions are essential for ensuring a secure and trustworthy cloud environment. This chapter introduces important concepts, models, key technologies, and unique characteristics of cloud computing, which helps readers better understand the fundamental reasons for current security, privacy, and trust issues in cloud computing. Furthermore, critical security, privacy and trust challenges, and the corresponding state-of-the-art solutions are categorized and discussed in detail, followed by future research directions, which concludes this chapter.

With the new age of cloud computing, businesses have started advancing their workloads from traditional infrastructure to the Cloud. However, the rapid adoption of cloud services brought significant challenges around security. Trendy security paradigms built on the conservative perimeter defence, involving measures such as firewalls and intrusion detection systems, are, simply put, unable to tackle the advanced and adaptive stealthy threat that can exploit cloud computing premises. Building perimeter-based models assumes trustworthiness behind the perimeter, an obsolete assumption in the ever decentralized and interconnected digital world. This is shifting the focus of cybersecurity away from the traditional castle-and moat mentality and toward a more flexible security architecture that can authenticate and authorize access regardless of where on the network the user is connecting from. This paradigm shift towards a decentralized model built on "never trust, always verify" has pushed us to introduce the so-called "Zero Trust" security architecture. Zero Trust recognizes that threats can come from without or within - and therefore, all requests should be treated as malicious until proven otherwise. Zero Trust principles include validating identity, implementing least privilege access, utilizing micro-segmentation and performing continuous monitoring. These three components reduce the risk of data breaches, internal attacks and unauthorized access. The Silent Giant of Zero Trust: Cloud Security: Valid Application of Zero Trust to secure the holistic cloud environment. AI based tech - for example, machine learning, behavioral analysis, and automated threat detection- can turbo-charge Zero Trust via continuous user activity monitoring, real-time collaboration traffic analysis, and prediction of malicious patterns. These challenges can be tackled using Zero Trust and AI to improve threat detection and incident response times, enable data breach prevention and prediction capabilities, etc. Machine learning algorithms can also analyze massive amounts of data to uncover anomalies, such as attempts to access files without authorization or a user's unusual behaviour that could point to a threat. AI can also assist enterprises in responding to these breaches, so organizations will not just be aware of potential breaches but can respond in real-time, using automated actions such as blocking access to compromised systems or isolating systems believed to be compromised. Also, before any AI-based forecast turns into an organization threat, organizations would rectify such vulnerabilities, while this preventive approach will lead to a better security posture.

The paper seeks to counter several functionalities of the Enterprise Resource Planning system as brought up in the title. Essentially, the system’s role will be viewed in the perspective of regenerating better accounting practices in an advanced business setting and considering the size of the enterprise. However, a satisfying part of the paper attempts to bring out a clear depiction of the Enterprise Resource Planning paradigm/system as the main tool to take any credit made in the business accounts mechanics and base criteria. Subsequently, through this paper, all the roles of the tool at hand in enhancing accounting practices will substantially be played up. This research uses Jordan as the suitable setting for the realization of ERP’s comprehensive capabilities. An empirical research on Jordanian mining industry is used for sampling results as well as a theoretical critical review on the organisations adoption of the ERP system on their accounting systems (Naash & Khamis, 2009). Similarly, the Jordanian banks are briefly highlighted on a theoretical mode in phase of testing the both the alternative and null hypothesis. The empirical study is analyzed using a custom bucketing methodology on measuring the trends in the open-ended questions and attributed to efficiency. The latter are the variables tested on the open-ended questions. On the other hand, the closed questions are subjected to the analysis of variance (ANOVA) where the variances between the “yes” and “no” responses is checked. The two analytical approaches of the questionnaires yields are interrelated because of the homogeneity of the question types. Objectively, the null hypotheses Hₒ is tested by implying on the risk factors and challenges facing the system implementation in the organization; it is from the corresponding findings where the research infer its recommendations. The alternative hypotheses Hɪ implicates on the massive encroachments of ERP on the Jordanian Accounting sector. The proposition is thusly tested by the overall results from bucketing and ANOVA of Jordanian Bromine and Arab Potash companies conducted surveys. The research methodology quantitatively utilized Jordanian Bromine Company and Arab Potash Company companies to test whether the was any role played by Enterprise resource planning, commonly abbreviated as (ERP), system in advancing the country of Jordan towards universal standard accounting practices and accounting mechanisms. Notably, the data as per two studies relied on for feedback on the implementation and application of the ERP paradigm/system on the structure of the Jordanian Bromine Company and Arab Potash Company companies. The final result proved true the deduction that the overall ERP structure (Enterprise Resource Planning System) greatly impacted the accounting mechanisms and standards in the Jordanian organizations. Recommendations aimed at integrating different sectors in Jordan, including the Jordanian Bromine Company and Arab Potash Company companies with the banking sector and financial institutions so that the entire system can work collaboratively under the protocols, rules and requirements of the universal standard accounting practices and accounting mechanisms.

This chapter outlines the two main frameworks – ISO 31000 and Committee on Sponsoring Organization's Enterprise Risk Management – which are used globally as guides on risk management systems. In Canada ISO: 31000 were adopted as a national standard, and in March 2010, the British Standards Institute also integrated the international standard into its own portfolio, as BS ISO 31000. Risk assessment involves three sub-elements – identification, analysis, and evaluation, which help a manager, decide how to respond to a specific risk, given the context and the organisational risk appetite. Communication of risk information should be both internal, for control purposes, and external, for reasons of accountability. Consultation helps management understand how well risks are being managed, how and if controls are working and where they are not, and utilise suggestions on how the process can be improved. In so doing, recording and reporting provides a mechanism for accountability, which is essential to a risk management system.

As organizations increasingly adopt cloud computing, ensuring data compliance has become a critical priority. Cloud environments pose unique challenges in meeting regulatory requirements due to their distributed and often multi-tenant nature. This review presents a comprehensive model for achieving data compliance in cloud computing, addressing essential aspects such as data privacy, security, sovereignty, and governance. The model emphasizes a structured, layered approach to compliance, integrating risk assessment, data governance, continuous monitoring, and incident management to ensure compliance throughout the data lifecycle. Key components of the proposed model include robust data privacy and protection mechanisms aligned with global regulations such as GDPR and CCPA, data security protocols for safeguarding confidentiality and access control, and data sovereignty policies to handle jurisdictional requirements and cross-border data flows. Additionally, continuous monitoring and automated auditing tools enhance real-time compliance management, while incident management procedures prepare organizations to respond promptly to breaches or policy violations. The framework also incorporates advanced technological solutions, including compliance automation, data loss prevention, and blockchain for traceability, to streamline compliance tasks and improve transparency. By addressing both the technical and governance aspects of data compliance, this model supports organizations in navigating complex regulatory landscapes across multi-cloud and hybrid environments. The review highlights best practices for ensuring compliance, such as regular policy updates, employee training, and third-party compliance management, to sustain long-term adherence. As the regulatory landscape evolves and new privacy-preserving technologies emerge, this model offers a scalable and adaptive approach, positioning organizations to manage data compliance effectively within dynamic cloud infrastructures. This comprehensive approach ensures secure, compliant data operations, fostering trust and accountability in cloud computing environments.

Background: The integration of mobile computing and cloud computing has the potential to revolutionize healthcare delivery by providing ubiquitous access to resources and enabling new service development and delivery models. While cloud computing has been extensively studied in fields such as genomics and molecular medicine, its application in healthcare beyond these domains remains relatively unexplored. This scoping review aims to identify the current state and emerging research topics in cloud computing in healthcare outside of the traditional “OMICS context.” Methods: A comprehensive search was conducted in MEDLINE in July 2013 and December 2014 using keywords related to cloud computing and cloud-based services. The identified journal and conference articles were independently categorized and summarized by two researchers, who subsequently consolidated their findings. Results: A total of 102 publications were analyzed, revealing six main topics in cloud computing in healthcare: telemedicine/teleconsultation, medical imaging, public health and patient self-management, hospital management and information systems, therapy, and secondary use of data. Common features utilized in these applications included broad network access for data sharing and access, as well as rapid elasticity to meet computing demands. While some articles highlighted the cost-effectiveness of pay-per-use cloud services, only 14 articles reported successful implementations, with many publications focusing on conceptual or prototypic projects. Additionally, several articles equated cloud computing with internet-/web-based data sharing, failing to illustrate the unique benefits of the cloud computing paradigm. Conclusions: Although the integration of mobile computing and cloud computing in healthcare is gaining attention, successful implementations in the field are still limited. Many papers use the term “cloud” interchangeably with “virtual machines” or “web-based” without clearly demonstrating the advantages of the cloud paradigm. Data safety and security concerns associated with involving external cloud partners remain significant barriers to adoption in the healthcare domain. As of now, cloud computing is primarily favored for its individual features, such as elasticity, pay-per-use models, and broad network access, rather than as a comprehensive cloud computing paradigm.

Accessing data from social networks using cloud computing has been adopted by many IT enthusiasts. It allows easy access to data and easy sending of data for communication purposes. For many social network users, cloud computing can simplify processes and save time and money. This article defines cloud computing and shows how one can quickly, safely and easily access data. It also discusses how cloud computing solutions could be beneficial to libraries in these basic areas: technology and acquisition.Today’s more libraries and social networks are joining the cloud. But despite the numerous social networks and data acquisition sites demand for data are still escalating—as they always will. To be able to access data conveniently today’s data competitiveness users of search engines must carefully scrutinize various libraries as well as social media to ensure that they match key data and communication needs and deliver intended results in the most efficient and cost-effective way. To meet these challenges, IT organizations are increasingly moving away from a device-centric view of IT, to a view that is application-, information- and people-centric. Cloud computing aligns with this new world view. Cloud computing technology is enabling IT to do more with the infrastructure that already exists, as well as adding new ways to expand capacity quickly and economically by using external cloud computing resources. This technology is enabling IT managers to treat infrastructure as a common substrate on which they can provision services to users faster in a much more flexible and cost-effective way –without having to re-design or add to the underlying infrastructure. Given the benefits of cloud computing, its broad appeal is not surprising. However, this new approach does raise some concerns. Chief among them is securing data in the cloud. This white paper will briefly review the basic fundamentals of cloud computing and describe how virtualization are enabling enterprises to move toward a flexible, federated computing model with a cohesive mix of private external and internal cloud environments. It then discusses the security implications of cloud computing and provides insights into addressing them, and offers a view of security best practices to adopt when considering cloud services.Cloud computing has become an increasingly popular means of delivering valuable, IT-enabled business services. Adopting cloud technology can be an affordable way to get access to a dynamically scalable, virtualized computing environment. Optimal IT hardware, software, expertise and infrastructure management resources that may not otherwise be available from a cost perspective can be rapidly deployed and easily scaled. Processes, applications and services can be available on demand, regard-less of the user location or device. The cloud provider is responsible for the environment, so organizations can make use of resources for short periods of time without having to maintain the environment when it is not being used. While cloud computing models are attractive because of their flexibility and cost effectiveness, certain challenges must be addressed in order to provide a viable option to traditional data services. First and foremost is the issue of security. The externalized aspect of outsourcing can make it harder to maintain data integrity and privacy, support data and service availability, demonstrate compliance, and secure highly available access to applications and information. In short, cloud computing can present an added level of risk. Organizations must therefore establish trust relationships with their cloud computing providers and understand risk in terms of how these providers implement, deploy, and manage security on their behalf. Whether delivered as part of the service or as specific components added in, your cloud provider should address the fundamentals of security and risk management through a comprehensive approach.

Online data is increasingly used by law enforcement to obtain evidence for investigations. Accessing this data, especially from cloud-based services, is difficult due to jurisdictional issues and changing technology. This article examines how cloud computing, data protection legislation, and multinational collaboration affect law enforcement agencies' cross-border data access. Extraterritorial data access legislation in the U.S. and EU pose accountability and transparency concerns, especially in liberal democracies. The study discusses private sector monitoring, corporate social responsibility programs including transparency reports, and state-corporate surveillance issues. In India, law enforcement agencies increasingly use cross-border data access but struggle with delayed and complicated mutual legal assistance treaties (MLATs) and Letters Rogatory (LRs). Tech company transparency reports show that data disclosure policies and regulatory requirements vary, with India failing to get vital evidence. The article continues by examining India's emerging data governance structure, including privacy, cross-border transfers, and law enforcement access issues. To secure data governance and security in an increasingly linked world, clearer legislation, increased international cooperation, and global best practices are needed