Data Loss Prevention from a Malicious Insider

ABSTRACT

This study targeted cloud service providers (CSPs) and presented a depiction of their security awareness to mitigate a malicious insider threat. CSPs must ensure the privacy of customers’ data. Cloud service customers (CSCs) place their data on the Cloud, relieving them from data security and management; however, they lose control over the data. Several organizations are concerned about the privacy of data on the cloud due to sophisticated threats like malicious insider. To reveal whether CSPs are better protecting CSCs data, a survey was conducted in New Zealand and Australia to assess the data loss prevention from a malicious insider in the Cloud. An inductive quantitative approach was used in this research, and data was collected from 79 service providers based in New Zealand and Australia. This study provides insights about insider threats risks and security recommendations are provided to CSPs’ to develop awareness and how CSPs should prevent data loss.

KEYWORDS:

• Cloud data privacy
• data loss prevention
• malicious insider threat
• cloud service provider
• cloud service consumer