From Design to Evaluation: A Novel Mitigation Model for Public Cloud Adoption

Cloud computing technology can provide several benefits to organizations. However, several threats and risks can significantly impact the information technology infrastructure in public clouds, potentially affecting organizational processes. A structured approach is needed to effectively identify, assess, and mitigate emerging threats and risks. However, widely adopted frameworks do not yet fit the conditions and characteristics of public cloud. Therefore, the purpose of this study is to develop a model that helps in identifying, assessing, and mitigating risks in public cloud adoption in organizations. In developing this model, the design science research methodology framework was adopted, as it is commonly used in research related to computer science and information systems. The results show that the model has three main phases in the model components: initiation (three sub-components), assessment (four sub-components), and mitigation (three sub-components). Risk factors and mitigation strategies have been adapted to the public cloud environment, which can assist in implementing the risk mitigation model. The proposed risk mitigation model is appropriate and suitable for use in public cloud environment adoption, following rigorous in-depth interviews. The academic findings can contribute to the development of risk management models, which include the identification of threat types, controls, risk factors, and mitigation strategies that have been adapted and mapped within the public cloud context. Practical benefits can help mitigate risks and potential impacts in public cloud environments.