Insufficient Due Diligence: Knowledge-Related Threats in Cloud Computing

It is well known that the human factor still plays a significant role in security incidents as malicious actors exploit vulnerabilities in the human dimension of the attack surface to successfully carry out their attacks. Knowledge-related threats increase the risk of a security compromise as lack of security awareness makes human operators prone to unintentional errors. This paper discusses these threats under the umbrella of cloud computing as their impact is even more significant due to the client-server multitenant nature of the cloud infrastructure, and proposes a conceptual framework, at its very early stages, that will assist enterprises to decide whether or not to migrate to a cloud infrastructure.