Navigating the Cloud: Security, Compliance, and Risk Challenges in SME Adoption
PDF

Keywords

GDPR
SMEs
PCI
DSS
cybersecurity
Cloud

How to Cite

Navigating the Cloud: Security, Compliance, and Risk Challenges in SME Adoption. (2025). Journal of Information Technology and Digital World, 7(3), 200-215. https://doi.org/10.36548/jitdw.2025.3.001

Abstract

Cloud computing is an area that can improve the digitalization, performance, and competitiveness of small and medium-sized enterprises. In some cases, however, the failure to embrace security, compliance, and risk management measures can hinder such benefits. Through previous research findings and qualitative studies available in the literature, this paper reviews various issues faced by SMEs after migrating to the cloud. As the analysis of key topics indicates, the subject matter of data breaches and data encryption is of considerable importance for data protection and security. The issues most critical to SMEs, especially with regard to regulatory compliance, are GDPR, PCI DSS, data sovereignty, and auditing. The inability to make internal reforms and integration difficulties of cloud solutions with current systems are hindering the implementation of IT policies. These problems are even more pronounced when there are limited funds and other resources, including a low budget, a lack of understanding of how to use cybersecurity tools, and poorly trained or experienced personnel. This essay calls for anticipatory, tailored cybersecurity measures, formal change management, and reskilling. In order to have a safer and more efficient SME cloud environment, the SMEs, the cloud service providers, and the lawmakers must come together in a multiparty initiative.

PDF

References

Duke IoW Team. (n.d.). Technology Adoption in Public Agencies. Duke Nicholas Institute. https://dukespace.lib.duke.edu/items/07f5b391-3e32-4fdf-a67e-790cd13fcda0

Ssekakubo, J., Suleman, H., & Marsden, G. (n.d.). Issues of Adoption of Cloud Computing in SMES in Uganda: The Case Study of Kampala District. Social Science and Humanities Journal.

Mun, Y. P., Khalid, H., & Nadarajah, D. (n.d.). Review of Technology Adoption Models and Theories. Journal of Information Systems and Technology Management. https://hal.science/hal-03741843/document

Venkatesh, Viswanath, and Susan A. Brown. "A longitudinal investigation of personal computers in homes: Adoption determinants and emerging challenges." MIS quarterly (2001): 71-102.

Zolas, Nikolas, Zachary Kroff, Erik Brynjolfsson, Kristina McElheran, David N. Beede, Cathy Buffington, Nathan Goldschlag, Lucia Foster, and Emin Dinlersoz. Advanced technologies adoption and use by US firms: Evidence from the annual business survey. No. w28290. National Bureau of Economic Research, 2021.

Adam, Rubina & Kotzé, Paula & Van der Merwe, Alta. (2011). Acceptance of Enterprise Resource Planning Systems by Small Manufacturing Enterprises. ICEIS 2011 - Proceedings of the 13th International Conference on Enterprise Information Systems. 1. 229-238.

Adane, Martin. "Business-driven approach to cloud computing adoption by small businesses." African Journal of Science, Technology, Innovation and Development 15, no. 2 (2023): 166-174.

Oliveira, Tiago, Manoj Thomas, Goncalo Baptista, and Filipe Campos. "Mobile payment: Understanding the determinants of customer adoption and intention to recommend the technology." Computers in human behavior 61 (2016): 404-414.

ResearchGate. (n.d.). Figure 1: The theoretical framework of innovation adoption based on SCT. https://www.researchgate.net/figure/The-theoretical-framework-of-innovation-adoption-based-on-SCT_fig1_235272333

Al-rahmi, A. M., Shamsuddin, A., & Al-rahmi, W. M. (2019). META: A model for emerging technology adoption. Journal of Information and Knowledge Management, 18(02).

Edward, M., & Bakkabulindi, F. E. K. (2014). A call for Return to Rogers’ Innovation Diffusion Theory. Makerere Journal of Higher Education, 6(1), 61-76.

Centre for International Business University of Leeds (CIBUL). (n.d.). Policy Implications from IDT4UKSME Project. University of Leeds.

Lee, Yvonne, WeiLee Lim, and Ho Sai Eng. "A systematic review of UTAUT2 constructs’ analysis among MSMEs in non-OECD countries." Journal of Science and Technology Policy Management 15, no. 4 (2024): 765-793.

Guo, Qin & Huang, Wei. (2024). Analyzing the Diffusion of Innovations Theory. Scientific and Social Research. 6. 95-98. 10.26689/ssr.v6i12.8947.

Alomari, Ali & Abdullah, Nasuha. (2023). Factors influencing the behavioral intention to use Cryptocurrency among Saudi Arabian public university students: Moderating role of financial literacy. Cogent Business & Management. 10.

Alwreikat, Asma, Ahmed Maher Khafaga Shehata, and Mohammed Khair Abu Zaid. "Arab scholars’ acceptance of informal scholarly communication tools: applying the technology acceptance model 2 (TAM2)." Global Knowledge, Memory and Communication 72, no. 1/2 (2023): 160-178.

Rogers, Alan D. Examining small business adoption of computerized accounting systems using the technology acceptance model. Walden University, 2016.

Diffusion of Innovations Theory. Investopedia. Retrieved from https://www.investopedia.com/terms/d/diffusion-of-innovations-theory.asp

Rana, Nripendra P., and Yogesh K. Dwivedi. "Citizen's adoption of an e-government system: Validating extended social cognitive theory (SCT)." Government Information Quarterly 32, no. 2 (2015): 172-181.

Thong, James YL. "An integrated model of information systems adoption in small businesses." Journal of management information systems 15, no. 4 (1999): 187-214.

Plageras, Antonios, Apostolos Xenakis, Konstantinos Kalovrektis, and Denis Vavougios. "An Application Study of the UTAUT Methodology for the Flipped Classroom Model Adoption by Applied Sciences and Technology Teachers." Int. J. Emerg. Technol. Learn. 18, no. 2 (2023): 190-202.

Priyadarshinee, Pragati. "Impact of Fog Computing on Indian Smart-Cities: An Empirical Study." (2021).

Basu, Aveek, Sraboni Dutta, and Rohini Jha. "A comprehensive approach to study the adoption and implementation of cloud-based ERP among SMEs." International Journal of Business Information Systems 42, no. 3-4 (2023): 305-330.

Williams, Michael D., Nripendra P. Rana, and Yogesh K. Dwivedi. "The unified theory of acceptance and use of technology (UTAUT): a literature review." Journal of enterprise information management 28, no. 3 (2015): 443-488.

Taiminen, Heini Maarit, and Heikki Karjaluoto. "The usage of digital marketing channels in SMEs." Journal of small business and enterprise development 22, no. 4 (2015): 633-651.

Singh, Gavin. "Technology Acceptance Model (TAM) and Use and Adoption of Technology by Small Business Owners in Queens, NY." (2022).

Adane, Martin. "Cloud computing adoption: Strategies for Sub-Saharan Africa SMEs for enhancing competitiveness." African Journal of Science, Technology, Innovation and Development 10, no. 2 (2018): 197-207.

Nan, Zhang, G. XUNHUA, and C. GUOQING. "IDT-TAM INTEGRATED MODEL FOR IT ADOPTION." (2008): 510-523.

Soomro, K. A., Shah, N., & Memon, Z. A. (2023). Factors influencing the intention to adopt digitalization among SMEs in Europe. Asia-Pacific Journal of Business Administration, 16(2), 274-295.

Wang, Y. M., Wang, Y. S., & Yang, Y. F. (2017). Understanding the Determinants of Blockchain Technology Adoption for Business Process Management. Proceedings of the 17th International Conference on Electronic Business. https://www.mdpi.com/2075-5309/12/10/1709

Susanty, Aries & Puspitasari, Nia Budi & Siahaan, Geovany & Setiawan, Sigit & Syafrudin, Muhammad. (2025). Factors influencing the intention of textile and garment SMEs to adopt digital technologies and its impact on performance. Scientific Reports. 15.

Techaisle. (n.d.). 5 SMB Cloud Adoption Lessons for Success. https://techaisle.com/cloud-reports/5-smb-cloud-adoption-lessons-for-success

Yeboah-Boateng, Ezer Osei, and Kofi Asare Essandoh. "Factors influencing the adoption of cloud computing by small and medium enterprises in developing economies." International Journal of Emerging Science and Engineering 2, no. 4 (2014): 13-20.

Ratten, Vanessa. "International consumer attitudes toward cloud computing: a social cognitive theory and technology acceptance model perspective." Thunderbird International Business Review 57, no. 3 (2015): 217-228.