# Factors Affecting the Organizational Adoption of Secure Community Cloud in KSA

Authors: Nouf S. Aldahwan; Muhammed S. Ramzan
Journal: Security and Communication Networks
 (2021)

---

## Abstract

Cloud computing is an innovative technology and gaining popularity in variety of organization to meet their computing requirements. Saudi Arabia is considered as the Gulf region’s high economy and the future market for cloud computing technologies. Analysis of its economic benefits, adequacy from technical, organizational, and environmental viewpoints, and possible challenges should precede the implementation of new technologies. Latest research and developments on cloud computing are causally linked to the emphasis on applications, advantages, expenditures, and technology. The community cloud (CC) is an impressive replacement for different organizations as it promotes cost reduction and quality enhancement. However, this research was performed to study the perception of IT and telecommunications company employees and computer users who support community cloud. The current state of community cloud adoption in KSA is analyzed. Present challenges impact the adoption of community cloud in Saudi Arabia and define the motivation factors. Questionnaires were used to accomplish these goals. Questionnaires were designed to accomplish these goals and it is implemented using survey. Questions about confidence are also a key issue. Issues such as data privacy, integrity, and availability are the factors influencing the organization’s acceptance of community cloud.


---

## Body

## 1. Introduction

For about half a century, since the dawn of the computing era, disruptive multicore technology has created the urge and need for computational science society and software vendors to comprehend and exploit concurrency. The focus is no longer on developing faster clock rates but designing algorithms and applications helps to effectively use the multiple cores of the modern processor. The need and urge have begotten the idea of cloud computing. According to Marinescu [1], cloud computing is a model for improving pervasive, quick, on-demand network access to a communal pool of connected computing resources, such as servers, services, applications, and storage, that can be quickly set up and freed with the least amount of management effort or interaction from providers. Cloud computing eon began in 2006 after the Amazon Web Services (AWS) developed the Elastic Cloud Computing (EC2) and the Simple Storage Service (S3). Since then, the cloud computing program has been inspired by the knowledge that large computing and storage farms can efficiently process and store data that are retrievable through the Internet. Cloud computing enables local to network-centric computing and content, with storage and processing resources provided by remote data centers. Users of cloud computing, as a result, hand over control of their data and code to cloud service providers. Furthermore, cloud computing provides metered storage and computation capabilities, allowing clients to pay only for the services they utilize [1]. Beside the cloud advantages, the main obstacles impeding the widespread adoption of cloud computing are security, confidentiality, integrity, availability, and trust issues [2].Information technology has evolved over time, resulting in cloud computing concept. This was identified as one of the primary computing models, and various educational and industrial groups were more interested in researching the effective paradigm [3].Many developed countries have implemented cloud computing, which has resulted in improved government functions, citizen and organization services, and international cooperation. Even while cloud computing is no longer regarded as a cutting-edge technology in developed countries, it marks a paradigm shift for developing and poor countries. In 2016, according to O’Connell, the Communications and Information Technology Commission (CITC), Saudi Arabia’s communications watchdog, dispensed a cloud computing regulatory framework. In 2018, the National Cybersecurity Agency (NCA) also issued broad restrictions on the usage of cloud computing services that were based outside Saudi Arabia, a move that raised concerns for cloud users and service providers. In February 2019, the Ministry of Communications and Information Technology issued the country’s first cloud policy that formed the basis for the adoption of cloud services at the state level. However, the policy’s state is still marked as a draft, and its exact status remains unknown. Nevertheless, the policy goals were to accelerate the adoption of cloud computing amenities by the government and private institutions when making investment decisions regarding information technology, improve efficiency in services offered to the citizens, offer more robust cybersecurity, intensify innovations, and enhance agility and consistency [4].According to Al-Ruithe et al. [5], despite Saudi Arabia’s recent extensive investments aimed at developing its information and technology infrastructure, the country is still lagging in embracing cloud computing. In a study conducted by Al-Ruithe and his colleagues, as of 2018, about 54.37% of Saudi Arabians who were interviewed had not adopted cloud computing in their organizations, only 16.50% had adopted some cloud services in their organizations, while the rest did not know. Still, among those who had not adopted cloud computing, 27.68% reported that cloud computing was not even being discussed in their agenda or investments, 18.75% indicated that they did not consider adopting cloud computing services, with only 21.43% intended to embrace the services in about two years, 15.17% in a year, and 6.25% in the next six months. Interestingly, 10.71% were oblivious of any plans regarding cloud computing. Concerning cloud deployment models in the organizations that had embraced cloud computing, 53.33% had adopted private cloud (36.67% within their premises), 35.00% had private cloud, 10.00% used community cloud, and 6.67% used the hybrid cloud, while 6.67% were not sure. Similarly, regarding the adoption of cloud service models, 58.33% used SaaS, 56.67% adopted IaaS, and 28.33% used PaaS. However, 10.00% of the respondents did not know which services they were using.Despite recent major investments in development and extensive efforts to enhance its ICT infrastructure, in terms of community cloud computing, the Kingdom of Saudi Arabia is currently still behind. The goal of this article is to investigate the current state of community cloud adoption in KSA. this study looked at the perspectives of employees in IT and telecommunications firms, as well as users of community cloud-supporting devices, in order to discover motivating factors and current difficulties impacting community cloud adoption in Saudi Arabia.The purpose of this research is to look at the perspectives of IT and telecommunications professionals, as well as users of cloud computing-supporting devices, of community cloud computing as the future generation of computing technology, as well as the degree of community cloud adoption, and discover motivating factors as well as existing obstacles affecting community cloud adoption in Saudi Arabia. The first section of this paper provides an introduction, while the second section contains brief studies of cloud computing. The community cloud adoption factors will be covered in Section3. The survey and data collecting will be discussed in Section 4 to meet the research’s goals. The fifth section is all about data analysis. The research findings and results will be presented in Section 6. The recommendation and conclusion will be presented in Section 7.


## 2. Brief Review of Cloud Computing

This section reviews cloud computing, the cloud computing service model, and the cloud computing deployment model.


### 2.1. Cloud Computing Service Model

According to the National Institute of Standards and Technology [6], cloud computing service models include software as a service (SaaS), platform as a service (PaaS), and infrastructure as a service (IaaS). NIST stated that the software as a service only runs software developed by its vendors. SaaS services can be accessed using user interfaces, such as web browsers via stationary and mobile devices. However, users do not manage or control the basic infrastructure of the service model like the network, servers, storage, or operating systems. The services offered under SaaS include enterprise services (including workflow management, desktop software, communications, and supply chain) and web 2.0 applications (including metadata management, blogs, portal services, wiki links, and social networking). The platform as a service enables the deployment of customized and acquired applications using tools and programming languages developed by the provider. It offers services, such as device integration, sandboxes, testing and instrumentation, and session, content, and knowledge management. Users have managed over the deployed applications but not the network, servers, OS, or storage. Users can use infrastructure as a service to deploy and run arbitrary programs, which includes processing, storage, networking, and other basic computing capabilities. Users have control over OS, storage, and networks but do not control or manage the fundamental cloud infrastructure. IaaS services include server hosting, operating systems, storage, virtual instances, load balancing, Internet access, and web servers. Finally, the DBaaS is a multilayered infrastructure with a user interface layer that accesses the service via the Internet, an application layer that accesses software and storage space services, a database layer that offers a steadfast and resourceful database service, and a data storage layer that encrypts data without user intervention, handles backups, and keeps track of the disk.


### 2.2. Cloud Deployment Service Model

Community cloud, private cloud, public cloud, and hybrid cloud are examples of cloud computing deployment models. Linthicum [7] noted that these models deploy the cloud delivery services such as DBaaS, IaaS, PaaS, and SaaS to users. In the community cloud, the infrastructure is communal to several enterprises and sustains a community with common concerns including policies, missions, objectives, compliance, and security requirements. The community cloud may exist within or outside the premises of the firm or third party that manages it. Correspondingly, in the public cloud, the infrastructure is usually owned by the cloud service provider and made available to the public or industry. The infrastructure of a private cloud, on the other hand, is administered exclusively for a single business, and it can be controlled by that organization or a third party, and it can be located within or outside the firm’s premises. The infrastructure of a hybrid cloud combines two or more clouds (a combination of private, community, and public clouds). While individual clouds remain distinct entities, they are linked via homogeneous or proprietary technology, which improves data and software transferability. However, it would necessitate different security protocols and restrictions to a specific domain for the software running on it.


### 2.3. Cloud Computing Characteristics

Broad network access, measurable service, on-demand self-service, resource pooling, and quick elasticity are all characteristics of cloud computing. According to the Geeks for Geeks Organization website [8], on-demand self-service does not necessitate human administrators since the users themselves can manage, control, and monitor the computing resources as required. There is broad network access to the cloud implying that computing services are normally provisioned over standard networks and a variety of devices. Also, rapid elasticity means that the cloud computing services have information technology resources such as networks, servers, applications, and services that enable any service requested by users to be provided and scaled out as soon as its request is concluded. Moreover, cloud computing allows for the provision of services to clients from the same physical resource in a process known as resource pooling. Hence, the information technology resources are shared across multiple occupants and applications. Similarly, cloud computing allows for the tracking of resource utilization for each application and occupant through a measured service that enables both the user and the service provider to track usage for easy monitoring, billing, and effective use of resources.


## 2.1. Cloud Computing Service Model

According to the National Institute of Standards and Technology [6], cloud computing service models include software as a service (SaaS), platform as a service (PaaS), and infrastructure as a service (IaaS). NIST stated that the software as a service only runs software developed by its vendors. SaaS services can be accessed using user interfaces, such as web browsers via stationary and mobile devices. However, users do not manage or control the basic infrastructure of the service model like the network, servers, storage, or operating systems. The services offered under SaaS include enterprise services (including workflow management, desktop software, communications, and supply chain) and web 2.0 applications (including metadata management, blogs, portal services, wiki links, and social networking). The platform as a service enables the deployment of customized and acquired applications using tools and programming languages developed by the provider. It offers services, such as device integration, sandboxes, testing and instrumentation, and session, content, and knowledge management. Users have managed over the deployed applications but not the network, servers, OS, or storage. Users can use infrastructure as a service to deploy and run arbitrary programs, which includes processing, storage, networking, and other basic computing capabilities. Users have control over OS, storage, and networks but do not control or manage the fundamental cloud infrastructure. IaaS services include server hosting, operating systems, storage, virtual instances, load balancing, Internet access, and web servers. Finally, the DBaaS is a multilayered infrastructure with a user interface layer that accesses the service via the Internet, an application layer that accesses software and storage space services, a database layer that offers a steadfast and resourceful database service, and a data storage layer that encrypts data without user intervention, handles backups, and keeps track of the disk.


## 2.2. Cloud Deployment Service Model

Community cloud, private cloud, public cloud, and hybrid cloud are examples of cloud computing deployment models. Linthicum [7] noted that these models deploy the cloud delivery services such as DBaaS, IaaS, PaaS, and SaaS to users. In the community cloud, the infrastructure is communal to several enterprises and sustains a community with common concerns including policies, missions, objectives, compliance, and security requirements. The community cloud may exist within or outside the premises of the firm or third party that manages it. Correspondingly, in the public cloud, the infrastructure is usually owned by the cloud service provider and made available to the public or industry. The infrastructure of a private cloud, on the other hand, is administered exclusively for a single business, and it can be controlled by that organization or a third party, and it can be located within or outside the firm’s premises. The infrastructure of a hybrid cloud combines two or more clouds (a combination of private, community, and public clouds). While individual clouds remain distinct entities, they are linked via homogeneous or proprietary technology, which improves data and software transferability. However, it would necessitate different security protocols and restrictions to a specific domain for the software running on it.


## 2.3. Cloud Computing Characteristics

Broad network access, measurable service, on-demand self-service, resource pooling, and quick elasticity are all characteristics of cloud computing. According to the Geeks for Geeks Organization website [8], on-demand self-service does not necessitate human administrators since the users themselves can manage, control, and monitor the computing resources as required. There is broad network access to the cloud implying that computing services are normally provisioned over standard networks and a variety of devices. Also, rapid elasticity means that the cloud computing services have information technology resources such as networks, servers, applications, and services that enable any service requested by users to be provided and scaled out as soon as its request is concluded. Moreover, cloud computing allows for the provision of services to clients from the same physical resource in a process known as resource pooling. Hence, the information technology resources are shared across multiple occupants and applications. Similarly, cloud computing allows for the tracking of resource utilization for each application and occupant through a measured service that enables both the user and the service provider to track usage for easy monitoring, billing, and effective use of resources.


## 3. Community Cloud Adoption Factors

Community cloud applications are affected by many factors such as ease of use, QoS, sustainability, cost, and complexity. Table1 summarizes the main factors presented in adopting community cloud computing.Table 1
Summary of main factors present in adopting community cloud computing.
FactorsReferencesCost[9–34]Availability[9, 22]Compliance[9]Interoperability[9, 27]Performance[10, 14, 18, 22, 26, 34–37]QoS[10, 14–16, 31, 34, 38–42]Visibility[38]Security[11, 20, 21, 23, 34–37, 39, 42–45]Accuracy[25, 38]Attack detection[38]Complexity[38]Ease of use[11, 12, 20, 22, 23, 26, 39]Sustainability[12, 13]Shared resource[12]Transparency, resource access, efficiency, and reliability[13]Feasibility[44, 46]Socio-economic, coordination management and provisioning, and communication[44]Elasticity[18]Usefulness[39]Risk analysis[39]Privacy[20, 41, 42]Integration[47]Flexibility[47]Usefulness and incompatibility[20]Trust[20, 21, 24, 42]Usage and engagement[22]Adaptively[20, 25]Environment factors[48]Compatibility, wide network access, self-service, elasticity, and integration[26]Integration[27]Social and economic factors[42]Adequate resource[26, 37]Vender lock-in, security weaknesses, and lack of control[29]Energy consumption and queuing delay[30]Knowledge diffusion (KD), talent acquisition (TA), intelligence creation (IC), cloud-based virtual community, professional network (PN), collaboration platform (CP), and remote data storage (RS)[49]Suitability[31]Resource allocation[31]Scalability[31]


## 4. Survey and Data Collection

The information used in this study came from both primary and secondary sources. The primary data from the source were gathered through questionnaires and interviews although the details were from the secondary source academic papers, magazines, Internet, and cloud computing-based literature.


### 4.1. Primary Data Collection

The questionnaires were conducted with the aid of a survey monkey, an application for an online survey since this made it easy for management of questionnaires once they have been designed. It was made possible for simpler statistical analysis and can then be implemented sequentially.


### 4.2. Secondary Data Collection

The secondary information used for this analysis was collected from electronic databases online, like Google Scholar, IEEE, science direct, and Springer. Useful Internet articles were included.


## 4.1. Primary Data Collection

The questionnaires were conducted with the aid of a survey monkey, an application for an online survey since this made it easy for management of questionnaires once they have been designed. It was made possible for simpler statistical analysis and can then be implemented sequentially.


## 4.2. Secondary Data Collection

The secondary information used for this analysis was collected from electronic databases online, like Google Scholar, IEEE, science direct, and Springer. Useful Internet articles were included.


## 5. Data Analysis and Results

This section summarizes the findings of the research conducted to determine the level of community cloud computing usage in Saudi Arabia.


### 5.1. Analysis of Questionnaire

To examine the scope of community cloud adoption in Saudi Arabia, two separate questionnaires were distributed a through survey monkey online. One set of questions was aimed at IT managers and telecoms firms, while the other set was aimed at IT and telecommunications companies as well as computer users who support community cloud.Research objective 1 is as follows: to explore the awareness of employess in IT and telecommunications company and system users that enable community cloud computing, as the computing technology of the next decade.However, the questionnaire also measured the level of awareness and intentions towards adopting community cloud computing as shown in Figure1. 80% of the respondents rely on that community cloud access to applications from anywhere. In addition, 80% of the respondents rely on that community cloud 24 hours access to infrastructure and content, and community cloud increased openness of users to new technologies.Figure 1
Level of awareness.Research objective 2 is as follows: to analyze the adoption status of community cloud adoption in Saudi Arabia as defined by Oliveira et al. [50]. Whilst 70% of respondents agreed that they have adopted community cloud technology that is already existing as an attractive economic option to the organization, 40% of respondents agreed that provide well-known plan for adopting community cloud computing and 40% of the respondents considered that there are physical or technical reasons that prevent community cloud computing adopting in the organization as shown in Figure 2.Figure 2
Adoption status of community cloud adoption in Saudi Arabia.Research objective 3 is as follows: to determine the factors that influence community cloud adoption in Saudi Arabia based on factors mentioned in Table1.The result showed the important factors for adopting the community cloud are reducing the cost which are represented in Figure3.Figure 3
Factors influencing community cloud adoption.Research objective 4 is as follows: to recognize current issues affecting the adoption of community cloud in Saudi Arabia based on factors mentioned in Table1. The result shows that the confidence is the main factor affecting the adoption of community cloud with 80% as shown in Figure 4.Figure 4
Issue influencing community cloud adoption.


## 5.1. Analysis of Questionnaire

To examine the scope of community cloud adoption in Saudi Arabia, two separate questionnaires were distributed a through survey monkey online. One set of questions was aimed at IT managers and telecoms firms, while the other set was aimed at IT and telecommunications companies as well as computer users who support community cloud.Research objective 1 is as follows: to explore the awareness of employess in IT and telecommunications company and system users that enable community cloud computing, as the computing technology of the next decade.However, the questionnaire also measured the level of awareness and intentions towards adopting community cloud computing as shown in Figure1. 80% of the respondents rely on that community cloud access to applications from anywhere. In addition, 80% of the respondents rely on that community cloud 24 hours access to infrastructure and content, and community cloud increased openness of users to new technologies.Figure 1
Level of awareness.Research objective 2 is as follows: to analyze the adoption status of community cloud adoption in Saudi Arabia as defined by Oliveira et al. [50]. Whilst 70% of respondents agreed that they have adopted community cloud technology that is already existing as an attractive economic option to the organization, 40% of respondents agreed that provide well-known plan for adopting community cloud computing and 40% of the respondents considered that there are physical or technical reasons that prevent community cloud computing adopting in the organization as shown in Figure 2.Figure 2
Adoption status of community cloud adoption in Saudi Arabia.Research objective 3 is as follows: to determine the factors that influence community cloud adoption in Saudi Arabia based on factors mentioned in Table1.The result showed the important factors for adopting the community cloud are reducing the cost which are represented in Figure3.Figure 3
Factors influencing community cloud adoption.Research objective 4 is as follows: to recognize current issues affecting the adoption of community cloud in Saudi Arabia based on factors mentioned in Table1. The result shows that the confidence is the main factor affecting the adoption of community cloud with 80% as shown in Figure 4.Figure 4
Issue influencing community cloud adoption.


## 6. Discussion

This study aims to assess the variables influencing the adoption of Saudi Arabia community cloud computing. This has been quantitatively done with usage of online surveys. The collected results were examined. The results of study will be presented in relation to check the research goals and literature.Objective 1 of research is as follows: to examine the understanding of workers in IT and Telecommunications companies and system users who support cloud computing as community cloud computing is the computing technology in the next era.This objective aimed to investigate the level of awareness of this technology and the extent that they use community cloud computing. The study found that 67% of the sample respondents are fully aware of community cloud computing. Although 30% of the respondents stated to be neutral of community cloud computing, only 3% confirmed they are not aware of it as shown in Figure5.Figure 5
Percentages of level awareness.Objective 2 of research is as follows: to know the scale of community cloud computing adoption in Saudi Arabia.The results show that 70% of respondents reported that community cloud technology already exists as an attractive economic option to the organization. 60% of respondents reported that the organization provides well-known plan planning to adopt community cloud computing. Furthermore, just 40% of respondents said that physical or technical barriers impede their organization from implementing community cloud computing, with 60% of respondents reported that the organization intends to adopt community cloud in the future as shown in Figure6.Figure 6
The status of community cloud adoption in Saudi Arabia.Objective 3 of research is as follows: to establish motivation factors for the Saudi Arabia community cloud adoption.Reducing the cost was an important factor for 90% of respondents. The results show that 70% of respondents reported that the adequate resource and performance of data as a fully aware concern. Easy to use and accuracy prove to be the concern as indicated by 60% of respondents who rated this as fully aware concern.Objective 4 of research is as follows: to recognize existing problems impact on the adoption of community cloud computing in Saudi Arabia.Of all the respondents, 80% expressed that the confidence of data is fully aware with organization. The integrity of data was a concern to 70% of respondents as it was rated important fully aware to develop a plan to maintain the integrity and security of data and protect an availability and privacy of the information.


## 7. Limitation and Conclusion

The study’s key conclusions are as follows. Overall, community cloud computing is no longer a trend but rather a technique that is expected to transform the way companies work. It requires computing power to be made available on demand and in a scalable manner as well as flexible.The literature review looked into the factors that influence community cloud computing adoption based on previous research. The survey was used to determine the extent to which Saudi IT and telecoms firm employees and computer users have adopted the technology. The factors that influence community cloud computing adoption among Saudi IT and telecoms industry employees and computer users were investigated in this study. Our findings show that there is a large and positive association between community cloud computing awareness and community cloud computing adoption.The analysis has a range of limitations. The survey, for example, was limited to the Asser area, restricting its generalizability. Furthermore, the quantitative approach indicates that additional qualitative approaches may help us reinforce our conclusions. Other factors, such as a mentioned in a previous study, may be useful additions. In addition, the small sample size of 100 respondents is one of the study’s limitations. Future studies on this may look at different contexts, such as exploring community cloud computing adoption factors in universities or colleges.



---

*Source: 8134739-2021-09-10.xml*