Evaluation of cloud computing risks using an integrated fuzzy-ANP and FMEA approaches

Despite the considerable benefits of cloud-based services and their effect on the reduction of total investments in information technology (IT) infrastructures, there still exist a plethora of concerns regarding the potential risk of this relatively new method of resource outsourcing. Due to the diversity of activities in the risk management process, it is essential to develop an innovative framework for controlling and streamlining relevant processes. Such processes include the identification, ranking, and determination of relevant exposure strategies and risk responsiveness strategies. The proposed framework developed in this study was based on the risk management process phase of the PMBOK model to analyse the collected data via fuzzy analytical network processing and failure mode effective analysis methods. A survey was then drafted with participating IT experts. Results demonstrate that the three most important risks are data confidentiality, data integrity and reliability. Furthermore, 117 risk-responsiveness solutions such as auditing the scope of access to information, using relevant techniques to control data integrity, and implementing appropriate training programs for the support team within the organisation were recognised and ranked to suggest the most appropriate remedial strategies that extensively mitigate against identified risks.