Cybersecurity for Cloud-Based IoT Devices: Views from IT Professionals

The rapid adoption of cloud-based Internet of Things (IoT) devices in Sri Lanka has brought about significant cybersecurity challenges. These devices rely on cloud infrastructures for processing sensitive data, making them vulnerable to threats such as data breaches, unauthorized access, and denial-of-service (DoS) attacks. This study uses a qualitative approach, based on semi-structured interviews with eight IT professionals, to examine these challenges in the Sri Lankan context. Key findings reveal that limited resources, lack of expertise, and rapid technological advancements are critical barriers to effective IoT security. While global frameworks like the NIST Cybersecurity Framework provide valuable guidelines, their application must be tailored to local conditions, such as resource constraints and organizational capacities. To address these issues, the study emphasizes practical measures, including enhanced training programs, hands-on workshops, and regular vulnerability assessments, to strengthen cybersecurity in IoT ecosystems. Due to page limitations, detailed interview questions are made available in Zenodo resource. By aligning its recommendations with the National Cyber Security Strategy of Sri Lanka and addressing local socio-economic challenges, this study provides actionable insights for improving cybersecurity in cloud-based IoT environments. The findings contribute to both local policy enhancement and global discussions on IoT security in developing nations.