Fachbereich 9

Wirtschaftswissenschaften


Osnabrück University navigation and search


Main content

Top content

18. October 2016 : Journal paper accepted for publication in the Journal of Enterprise Information Management

Missing Cloud Security Awareness: Investigating Risk Exposure in Shadow IT " by Marc Walterbusch, Andrian Fietz and Frank Teuteberg has been accepted for publication in the Journal of Enterprise Information Management.

"Missing Cloud Security Awareness: Investigating Risk Exposure in Shadow IT" by Marc Walterbusch, Andrian Fietz and Frank Teuteberg has been accepted for publication in the Journal of Enterprise Information Management. On account of its easy and intuitive usage as well as obvious advantages (e.g., access to work data from anywhere, at any time and through any means) the evolutionary cloud computing paradigm favors the use of shadow IT. Since many employees are not aware of the associated risks and possible legal violations, unauthorized use of cloud computing services could result in substantial risk exposure for any company. The paper aims to explore and to extend the body of knowledge concerning the topic of cloud computing with regard to shadow IT. The aim of this contribution is to identify the reasons for the use of cloud computing services and the resulting shadow IT from an employee’s perspective, to demonstrate the counteractions a company may take against the unauthorized use of cloud computing services and to elaborate on the inherent opportunities and risks. We follow a mixed-methods approach consisting of a systematic literature review, a cloud computing awareness study, a vignette study, and expert interviews. The paper includes recommendations for action for the handling of the unauthorized usage of cloud computing services within a company, e.g., the set up of a company-wide cloud security strategy

The journal is currently classified as a C-rated journal according to the VHB Jourqual3 ranking. Moreover, the journal (having an H Index of 38) is ranked 136 th out of 817 in the category of "Computer Science (subject category Information Systems)" according to the Scimago Journal & Country Rank (SJR).