Affiliations: [a]
University of Dubai, UAE
| [b]
Zayed University, UAE
| [c]
University of Salford, UK
| [d]
ESPRIT University, Tunisia
Correspondence:
[*]
Corresponding author: Shafaq Naheed Khan, University of Dubai, UAE. Tel.: +971 4 5566 941; E-mail: [email protected].
Abstract: The widespread use of cloud computing (CC) has brought to the forefront information technology (IT) governance issues, rendering the lack of expertise in handling CC-based IT controls a major challenge for business enterprises and other societal organizations. In the cloud-computing context, this study identifies and ranks the determinants of role assigning and taking by IT people. The study’s integrative research links CC and IT governance to humane arrangements, as it validates and ranks role assigning and taking components through in-depth interviews with twelve IT decision-makers and forty-four Information Systems Audit and Control Association (ISACA) members, engaged as panelists in a Delphi technique implementation. The empirical results recognize skills and competencies as prioritized determinants of IT controls, while IT security, risk and compliance emerge as capabilities crucial to evaluate and manage CC service providers. Despite the study’s generalizability limitations, its findings highlight future research paths and provide practical guidelines toward the high technology of open-market IT self-governance. The latter entails the humane flows of collegial control and responsibility, as opposed to the inhumane flows of authority and power, under the sequestered technique of the bureaucratically-hierarchized IT hetero-governance.
Keywords: Cloud computing IT controls, role assignment, role taking components, cloud computing governance
