A FRAMEWORK TO ENHANCE DATA PRIVACY AND SECURITY FOR KENYAN ENTERPRISES UTILIZING CLOUD COMPUTING

INTRODUCTIONThis chapter covers enterprise cloud computing usage and privacy and security concerns. The focus will be on Safaricom and Airtel in Kenya. The research addresses how scalability and cost-effectiveness clash with cloud service risks and threats, providing a detailed study of the complex dynamics involved, driving the focus on how cloud computing affects enterprise data protection and formulates strategies to strengthen security.This research centers on the security and privacy risks linked to cloud computing. Such risks have exposed companies, including Safaricom, to vulnerabilities by enabling unauthorized access to confidential corporate information and leading to data breaches. While businesses and organizations globally are increasingly adopting cloud computing due to its benefits in flexibility, scalability, and cost-efficiency, a major concern remains the potential compromise of information security and privacy. Despite the clear advantages of cloud services, these risks pose a significant challenge (Vegesna, 2023).Earlier, businesses owned their IT infrastructure, providing them with the luxury of utilizing specialized security tools and monitoring data transfers. However, adopting cloud- based solutions necessitates trusting these providers and sharing private data with external service providers. This paradigm shift brings new challenges and vulnerabilities as the economy moves on the more complex terrain of shared resources, multi-tenant systems, and various transparency levels and responsibilities (Sun, 2020).The situation becomes even more complex because threats are changing constantly. Threat actors are always searching for vulnerabilities in cloud systems that they can exploit to launch more sophisticated cyber assaults. In April 24th, 2018, Safaricom was hacked and27.7 subscribers were affected as they were left out of accessibility financial services. Airtel has also undergone an attack that left users unable to access services. In the age of the cloud, businesses are subjected to all kinds of risks that are evolving every day. These risks can manifest as data breaches, ransomware attacks, insider threats, and regulatory compliance breaches (Kishor, 2023). Additionally, cloud services being available worldwide makes the situation much more complex because data can be sent across foreign borders, which may result in different rules and law conflicts (Abdulsalam & Hedabou, 2021). Because of this, businesses have to find a difficult balance between the need to be innovative and efficient and the need to protect their most valuable asset: their data.Ultimately, the absence of data privacy, security standards, and laws will worsen the situation. These compliance standards and regulation frameworks designed by Industries often take time to catch up with the speed of the technology, leaving the firms with different guidelines and suggestions (Sun, 2020). When operating in other states or sectors, enterprises can face security directives and compliance inconsistencies brought about by this variation. Cloud computing security has also advanced as new threats keep coming, as it is all about constant innovation (Ahmadi, 2023). If these concerns are not adequately addressed, such businesses could encounter financial losses, reputational damage, legal liability, and regulatory penalties. Enterprises should implement a holistic management of cloud data privacy and security, including technical, organizational, and regulatory issues.Enterprise cloud computing is spearheaded by technological innovations, changing business models, and regulatory domains (Wang et al., 2020). The shift to cloud computing that has taken place over the past decade has provided enterprises with an alternative to traditional infrastructures and an agile and scalable approach to technology. The transition in service implementation has been primarily driven by advancements such as high-speed internet, virtualization, containerization, and the availability of platform-as-a-service (PaaS) and infrastructure-as-a-service (IaaS) from leading cloud providers (Kunduru, 2023). As a result, businesses of all sizes and across various industries are adopting cloud technologies to innovate, improve service delivery, and remain competitive in the digital economy.As cloud computing continues to expand rapidly, various contextual factors influence how companies operate. These factors include heightened consumer expectations regarding data privacy and security, stricter government regulations, and the growing sophistication of cyber threats (Vegesna, 2023). In a time marked by data breaches and privacy controversies, businesses must prioritize protecting sensitive information and maintaining trust amongconsumers and stakeholders. Regulations such as the EU’s General Data Protection Regulation (GDPR) and the US’s California Consumer Privacy Act (CCPA) introduce complex requirements for data handling and security, presenting a challenging compliance environment for global organizations (Modisane & Jokonya, 2021).Cloud computing also exhibits a high rate of innovation and disruption as new technology and business models emerge and change the competition (Sun, 2020). When crafting IT strategies, organizations must carefully assess different options and trade-offs, including serverless computing, edge computing, hybrid models, and multi-cloud architectures. Furthermore, the growth of cloud computing, alongside emerging technologies such as artificial intelligence (AI), blockchain, and the Internet of Things (IoT), off ers both potential benefits and obstacles for businesses pursuing full-scale digital transformation. Enterprises should keep assessing their cloud data privacy and security structure to prevent risks and make the most of opportunities for development in this dynamic and ever- changing environment (Ahmadi, 2023).