Secure Cloud Implementation in Governmental Organisations
Jan Lampikari · Theseus (Ammattikorkeakoulujen) · 2020
This research studied the basic security-related principles in generalised manner that need evaluating when governmental organisations plan to implement cloud computing as a part of their operations. The main objectives were to find out what are the key elements to focus on in the cloud service provider selection process, and which are the critical areas, and need evaluating and controls from the customer’s perspective during and after the cloud implementation. Information was gathered using qualitative research methods, and the sources used included books, online resources and various standards. The idea was to use as recent sources as possible, but also some earlier materials were used if they were still relevant and provided useful information for the research. The research indicated that implementing cloud computing in general requires a deep understanding of the concepts behind it and realising how it affects the whole IT ecosystem of an organisation. Due to the extremely broad nature of the subject, this research was not able to discuss all areas related to the topic, nor could it examine any significant technical details behind the presented solutions. However, it was able to identify the key areas the organisations should focus on during the cloud implementation, and it can serve as an introduction to cloud computing for the governmental organisations from a security perspective.