Investigating the Vulnerability in Cloud-Based Services to Improve Cyber Security within Small Businesses

This thesis investigates the vulnerabilities in cloud-based services to enhance cybersecurity practices within small and medium-sized enterprises (SMEs). It identifies critical weaknesses from both user and service provider perspectives and analyses their impact on data confidentiality, integrity, and availability. Through a combination of primary and secondary research, the study evaluates existing security controls and standards, including ISO/IEC 27001 and the NIST Cybersecurity Framework, to determine their effectiveness in SME contexts. Based on the findings, a multi-layered cloud security framework is proposed that integrates DevSecOps methodologies, API protection, encryption mechanisms, and continuous vulnerability monitoring. The research also emphasises the importance of user awareness and sustainable cloud governance to strengthen SME resilience against emerging cyber threats. The results aim to support both practitioners and researchers in developing secure, scalable, and privacy-preserving cloud environments for small businesses. MSc in Applied Cyber Security, University of South Wales, 2024. Supervisor: Dr Anthony Corner.