Abstract
Although small and medium-sized enterprises (SMEs) are encouraged to seek new business opportunities by adopting and utilising cloud-based services, their understanding of threats, vulnerabilities and risk evaluation in the cloud environment, which is crucial in the success of cloud-based business intelligence (BI) adoption, is hardly known. The purpose of this study was to investigate SMEs’ understanding of security evaluation of cloud-based BI and associated challenges. A cross-sectional survey was conducted among 109 SME owners/managers from selected South African provinces in which data was collected by means of an electronic and postal questionnaire. The study found that SME owners/managers were aware of conventional security challenges in the cloud-based services including BIs, had a basic understanding of security evaluation in general, understood the need to evaluate cloud-based BIs in terms of physically checking for vulnerabilities and data security and were not proficient in performing security evaluations of cloud-based BIs and relied on experts. SMEs face predicaments in evaluating cloud-based BI due to a lack of appropriate tools they can use. The study concluded that SME owners/managers have a basic understanding of security evaluation and challenges it poses.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
References
Muntean, M.: Considerations regarding business intelligence in cloud context. Informatica Economica 19(4), 55–67 (2015)
Tamer, C., Kiley, N., Ashrafi, N., Kuilboer, J.: Risks and benefits of business intelligence in the cloud. In: Proceedings of the Northeast Decision Sciences Institute Annual Meeting, p. 86 (2013)
Forest Technologies: SME Survey 2015: The Greening of the SME Sector (2015). http://www.smesurvey.co.za/press.html
Antoo, M., Cadersaib, Z., Gobin, B.: PEST framework for analysing cloud computing adoption by Mauritian SMEs. Lect. Notes Softw. Eng. 3(2), 107–112 (2015)
Moyo, M., Loock, M.: South African small and medium-sized enterprises’ reluctance to adopt and use cloud-based business intelligence systems: a literature review. In: The 11th International Conference for Internet Technology and Secured Transactions (ICITST-2016), pp. 250–254 (2016)
Toesland, F.: Why SMEs are big targets for cybercrime (2016). https://www.raconteur.net/technology/why-smes-are-big-targets-for-cyber-crime
Madzima, K., Moyo, M., Dzawo, G., Mbodila, M.: Mobile security threats: a survey of how mobile device users are protecting themselves from new forms of cybercrimes. In: Proceedings of the 10th International Conference on Cyber Warfare and Security, ICCWS 2015, pp. 123–133 (2015)
Akinola, K.E., Odumosu, A.A.: Threat handling and security issue in cloud computing. Int. J. Sci. Eng. Res. 6(11), 1371–1385 (2015)
Moore, J.: Business Intelligence Takes to Cloud for Small Businesses (2014). https://www.cio.com/article/3237786/business-intelligence/9-ways-youre-failing-at-business-intelligence.html#tk.drr_mlt
Mohlameane, M.J., Ruxwana, N.L.: The potential of cloud computing as an alternative technology for SMEs in South Africa. J. Econ. Bus. Manage. 1(4), 396–400 (2014)
Boonsiritomachai, W., McGrath, M., Burgess, S.: A research framework for the adoption of business intelligence by small and medium-sized enterprises. In: 27th Annual SEAANZ Proceedings for Small Enterprise Association of Australia and New Zealand Conference, 16–18 July 2014, pp. 16–28 (2014)
Chang, V., Kuob, Y., Ramachandrana, M.: Cloud computing adoption framework: a security framework for business clouds. Future Gener. 57(2015), 24–41 (2015)
Narayanan, S.: Tackling the cyber security challenges faced by SMEs (2013). http://www.cisoplatform.com/profiles/blogs/tackling-the-cyber-security-challenges-by-smes
European Union Agency for Network and Information Security. Security framework for governmental clouds (2015). http://www.enisa.europa.eu/activities/Resilience-and-CIIP/cloud-computing/governmental-cloud-security/security-framework-for-govenmental-clouds
Chou, T.: Security threats on cloud computing vulnerabilities. Int. J. Comput. Sci. Inf. Technol. (IJCSIT) 5(3), 79–88 (2013)
Fernandes, D.A.B., Soares, L.F.B., Gomes, J.V.M., Freire, M., Inacio, P.R.M.: Security issues in cloud environments: a survey. Int. J. Inf. Secur. (IJIS) 2013(1), 1–62 (2013)
Subashini, S., Kavitha, V.: A survey on security issues in service delivery models of cloud computing. J. Netw. Comput. Appl. 34(1), 1–11 (2011)
Oza, N., Karppinen, K., Savola, R.: User experience and security in the cloud – an empirical study in the Finnish Cloud Consortium. In: The 2nd IEEE International Conference on Cloud Computing Technology and Science, pp. 621–628 (2010)
Lacey, D., James, B.E.: Review of Availability of Advice on Security for Small/Medium Sized Organisations (2010). https://ico.org.uk/media/about-the-ico/documents/1042344/review-availablility-of-security-advice-for-sme.pdf
Mussa, M., Kipanyula, M.J., Angello, C., Sanga, C.A.: Evaluation of Livestock Information Network Knowledge System (LINKS) based on user satisfaction definition of information system evaluation. Int. J. Inf. Commun. Technol. Res. 6(8), 115–130 (2016)
Wise, L.: Evaluating business intelligence in the cloud (2016). http://www.cio.com/article/3041639/business-intelligence/evaluating-business-intelligence-in-the-cloud.html
Al-yaseen, H.M.: Challenges of implementing healthcare information systems in developing countries: using a mixed method research. J. Emerg. Trends Comput. Inf. Sci. 3(11), 1521–1529 (2012)
Al-Yaseen, H., Al-Jaghoub, S., Al-Shorbaji, M., Salim, M.: Post-implementation evaluation of healthcare information systems in developing countries. Inf. Syst. J. 13(1), 9–16 (2010)
Heller, M.: How to Select the Best Self-service BI Tool for Your Business (2017). https://www.cio.com/article/3235394/business-intelligence/how-to-select-the-best-self-service-bi-tool-for-your-business.html#tk.cio_rs
Kazim, M., Zhu, S.Y.: A survey on top security threats in cloud computing. Int. J. Appl. Comput. Sci. Appl. 6(3), 10495–10500 (2015)
Cloud Security White Paper.: How to Evaluate the Data Security Capabilities of Cloud-Based Services (2011). http://www.carestream.com/WhitePaper_Cloud-Security.pdf
Heiser, J.: How to Evaluate Cloud Service Provider Security (2016). https://www.gartner.com/doc/3275117/evaluate-cloud-service-provider-security
Agostino, A., Soilen, S.K., Gerritsen, B.: Cloud solution in business intelligence for SMEs – vendor and customer perspectives. J. Intell. Stud. Bus. 3(2013), 5–28 (2013)
Vacca, J.R.: Security in the Private Cloud. Taylor and Francis, Denver (2017)
Willcocks, L.: Evaluating information technology investments: research findings and reappraisal. J. Inf. Syst. 2(1992), 243–268 (1992)
Shimamoto, CD.: How to Evaluate Cloud Security? (2015) https://www.techsoup.org/support/articles-and-how-tos/how-to-evaluate-cloud-security
Moghe, P.: 6 Hidden Challenges of using the Cloud for Big Data and How to Overcome Them (2016). https://thenextweb.com/insider/2016/04/12/6-challenges-cloud-overcome
Segars, A.H., Grover, V.: Strategic information systems planning success: an investigation of the construct and its measurement. MIS Q. 22(2), 139–163 (1998)
Chang, S.J., Van Witteloostuijn, A., Eden, L.: From the editors: common method variance in international business research. Int. J. Bus. Stud. 41(2), 178–184 (2010)
Author information
Authors and Affiliations
Corresponding author
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2019 Springer Nature Switzerland AG
About this paper
Cite this paper
Moyo, M., Loock, M. (2019). Small and Medium-Sized Enterprises’ Understanding of Security Evaluation of Cloud-Based Business Intelligence Systems and Its Challenges. In: Venter, H., Loock, M., Coetzee, M., Eloff, M., Eloff, J. (eds) Information Security. ISSA 2018. Communications in Computer and Information Science, vol 973. Springer, Cham. https://doi.org/10.1007/978-3-030-11407-7_10
Download citation
DOI: https://doi.org/10.1007/978-3-030-11407-7_10
Published:
Publisher Name: Springer, Cham
Print ISBN: 978-3-030-11406-0
Online ISBN: 978-3-030-11407-7
eBook Packages: Computer ScienceComputer Science (R0)