Marabelli, Marco and Newell, Sue (2013) Managing the outsourcing of information security processes: the 'cloud' solution. Parallel & Cloud Computing, 2 (1). pp. 24-31. ISSN 2304-9464

Preview

PDF - Published Version Download (255kB) | Preview

Abstract

Information security processes and systems are relevant for any organization and involve medium-to-high investment; however, the current economic downturn is causing a dramatic reduction in spending on Information Technology (IT). Cloud computing (i.e., externalization of one or more IT services) might be a solution for organizations keen to maintain a good level of security. In this paper we discuss whether cloud computing is a valid alternative to in-house security processes and systems drawing on four mini-case studies of higher education institutions in New England, US. Our findings show that the organization’s IT spending capacity affects the choice to move to the cloud; however, the perceived security of the cloud and the perceived in-house capacity to provide high quality IT (and security) services moderate this relationship. Moreover, other variables such as (low) quality of technical support, relatively incomplete contracts, poor defined Service License Agreements (SLA), and ambiguities over data ownership affect the choice to outsource IT (and security) using the cloud. We suggest that, while cloud computing could be a useful means of IT outsourcing, there needs to be a number of changes and improvements to how the service is currently delivered.

Item Type:	Article
Schools and Departments:	School of Business, Management and Economics > Business and Management
Subjects:	H Social Sciences > HB Economic theory. Demography
Depositing User:	Catrina Hey
Date Deposited:	03 Sep 2014 11:39
Last Modified:	06 Mar 2017 12:24
URI:	http://srodev.sussex.ac.uk/id/eprint/49696

View download statistics for this item

📧 Request an update