Qualitative Exploration of Data Security Risks in Mobile Cloud Computing for Higher Education

ABSTRACT Mobile cloud computing (MCC) represents a groundbreaking approach to education, significantly influencing teaching and learning dynamics. Educational institutions stand to gain from MCC by facilitating the storage of educational data and granting users the capability to access this data from various locations at any time. However, several challenges must be addressed to ensure the successful adoption and comprehensive integration of MCC on a global scale. Among these challenges, data security emerges as a critical concern, presenting substantial risks to the effective implementation of MCC. This study seeks to explore the potential risks to data security associated with the implementation of MCC in Palestinian Higher Education Institutions (HEIs). In addition, the research outlines comprehensive strategies that integrate technological and organizational measures to address the identified risks. Employing a qualitative research methodology, the study included in‐depth semi‐structured interviews with 10 IT experts and professionals from Palestinian HEIs and local cloud service providers, selected for their expertise in MCC. Thematic analysis was used to interpret the interview data and identify prevalent themes, supported by NVivo12 software. Findings indicate that most participating experts perceive the implementation of MCC in Palestinian HEIs as posing significant data security risks. Furthermore, a notable lack of awareness exists among students and staff regarding these cloud data security risks, underscoring the necessity for ongoing training initiatives to enhance understanding data security issues related to MCC. Additionally, risks such as data loss, data breaches, data location, data backup and restoration, data segregation, and data scavenging significantly influence the successful implementation of MCC in HEIs. The study highlights the importance of employing technical tools and organizational strategies to mitigate these risks effectively. Palestinian universities face a range of challenges in managing data security risks inherent in MCC, including technical limitations, cost management, gaps in knowledge and expertise, administrative hurdles, and user‐related concerns. This research seeks to enhance the understanding of HEIs regarding the effective implementation of MCC and the maximization of its benefits, ultimately leading to improved operational outcomes. Through this initiative, institutions will gain valuable insights that will assist them in overcoming challenges and making substantial progress in the initial phases of MCC implementation, thereby ensuring a smoother transition to this technology. Moreover, this research will also provide significant benefits to cloud service providers by offering a comprehensive understanding of the specific data security risks associated with MCC implementation in HEIs. This knowledge will facilitate the development of tailored services and solutions that adequately address the unique needs of these institutions.