{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,15]],"date-time":"2026-07-15T02:21:30Z","timestamp":1784082090656,"version":"3.55.0"},"reference-count":79,"publisher":"MDPI AG","issue":"3","license":[{"start":{"date-parts":[[2021,3,17]],"date-time":"2021-03-17T00:00:00Z","timestamp":1615939200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Information"],"abstract":"<jats:p>The purpose of this study was to investigate security evaluation practices among small and medium enterprises (SMEs) in small South African towns when adopting cloud business intelligence (Cloud BI). The study employed a quantitative design in which 57 SMEs from the Limpopo Province were surveyed using an online questionnaire. The study found that: (1) the level of cybersecurity threats awareness among decision-makers was high; (2) decision-makers preferred simple checklists and guidelines over conventional security policies, standards, and frameworks; and (3) decision-makers considered financial risks, data and application security, and cloud service provider reliability as the main aspects to consider when evaluating Cloud BI applications. The study conceptualised a five-component security framework for evaluating Cloud BI applications, integrating key aspects of conventional security frameworks and methodologies. The framework was validated for relevance by IT specialists and acceptance by SME owners. The Spearman correlational test for relevance and acceptance of the proposed framework was found to be highly significant at p &lt; 0.05. The study concluded that SMEs require user-friendly frameworks for evaluating Cloud BI applications. The major contribution of this study is the security evaluation framework conceptualised from the best practices of existing security standards and frameworks for use by decision-makers from small towns in Limpopo. The study recommends that future research consider end-user needs when customising or proposing new solutions for SMEs in small towns.<\/jats:p>","DOI":"10.3390\/info12030128","type":"journal-article","created":{"date-parts":[[2021,3,17]],"date-time":"2021-03-17T11:48:22Z","timestamp":1615981702000},"page":"128","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":14,"title":["Conceptualising a Cloud Business Intelligence Security Evaluation Framework for Small and Medium Enterprises in Small Towns of the Limpopo Province, South Africa"],"prefix":"10.3390","volume":"12","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-8707-6179","authenticated-orcid":false,"given":"Moses","family":"Moyo","sequence":"first","affiliation":[{"name":"Information Systems Department, School of Computing, College of Science, Engineering, and Technology, University of South Africa (UNISA), Florida Campus, Johannesburg 1709, South Africa"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8005-716X","authenticated-orcid":false,"given":"Marianne","family":"Loock","sequence":"additional","affiliation":[{"name":"Information Systems Department, School of Computing, College of Science, Engineering, and Technology, University of South Africa (UNISA), Florida Campus, Johannesburg 1709, South Africa"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"1968","published-online":{"date-parts":[[2021,3,17]]},"reference":[{"key":"ref_1","first-page":"1","article-title":"Major Challenges Impeding the Fast Adoption of Cloud Computing: A Case Study of South African Organisations and Emerging Economics","volume":"2","author":"Mashandudze","year":"2015","journal-title":"Open J. Mob. Comput. Cloud Comput."},{"key":"ref_2","doi-asserted-by":"crossref","first-page":"1","DOI":"10.4102\/sajim.v22i1.1132","article-title":"Exploring the impact of cloud computing on existing South African regulatory frameworks","volume":"22","author":"Mohlameane","year":"2020","journal-title":"S. Afr. J. Inf. Manag."},{"key":"ref_3","first-page":"115","article-title":"Small and Medium Enterprises in the Cloud in Developing Countries: A Synthesis of the Literature and Future Research Directions","volume":"5","author":"Osman","year":"2015","journal-title":"J. Manag. Sustain."},{"key":"ref_4","unstructured":"Turner, G. (2020, November 15). How Technology is Reshaping South Africa\u2019s Small Business Economy. Available online: https:\/\/www.xero.com\/content\/dam\/xero\/pdf\/southafrica-tech-adoption-report.pdf."},{"key":"ref_5","first-page":"116","article-title":"Business Intelligence in Cloud","volume":"10","author":"Olszak","year":"2014","journal-title":"Pol. J. Manag. Stud."},{"key":"ref_6","first-page":"241","article-title":"Benefits and Challenges of Cloud Computing Technology Adoption in Small and Medium Enterprises (SMEs)","volume":"41","author":"Widyastuti","year":"2018","journal-title":"Adv. Econ. Bus. Manag. Res."},{"key":"ref_7","first-page":"747","article-title":"Cloud Business Intelligence: An Empirical study","volume":"27","author":"Patil","year":"2020","journal-title":"Stud. Indian Place Names UGC Care J."},{"key":"ref_8","doi-asserted-by":"crossref","first-page":"13","DOI":"10.4102\/sajim.v12i1.445","article-title":"Business intelligence in the cloud","volume":"12","author":"Thompson","year":"2010","journal-title":"S. Afr. J. Inf. Manag."},{"key":"ref_9","first-page":"4120","article-title":"Cloud Business Intelligence","volume":"10","author":"Elmalah","year":"2019","journal-title":"Int. J. Adv. Netw. Appl."},{"key":"ref_10","unstructured":"Kalidas, S., Magwentshu, N., and Rajagopaul, A. (2020, December 10). How South African SMEs Can Survive and Thrive Post-COVID-19. Available online: https:\/\/www.mckinsey.com\/featured-insights\/middle-east-and-africa\/how-south-african-smes-can-survive-and-thrive-post-covid-19#.11."},{"key":"ref_11","unstructured":"SME South Africa (2020, July 21). An Assessment of South Africa\u2019s SME Landscape: Challenges, Opportunities, Risks and Next Steps. Available online: https:\/\/www.smallbusinessinstitute.co.za\/wp-content\/uploads\/2019\/12\/AssessmentOfSAsSMELandscape.pdf."},{"key":"ref_12","unstructured":"Small Enterprise Development Agency (2021, January 20). Small, Medium and Micro Enterprises: Quarterly Update-3rd Quarter 2019. Available online: http:\/\/www.seda.org.za\/Publications\/Publications\/SMMEQuarterly2019-Q3.pdf."},{"key":"ref_13","first-page":"1371","article-title":"Threat Handling and Security Issue in Cloud Computing","volume":"6","author":"Akinola","year":"2015","journal-title":"Int. J. Sci. Eng. Res."},{"key":"ref_14","unstructured":"Salim, A., Li, M., He, Q., and Shen, J. (July, January 27). Cloud computing services adoption in Australian SMEs: A firm-level investigation. Proceedings of the Pacific Asia Conference on Information Systems, Chiayi, Taiwan."},{"key":"ref_15","unstructured":"Thompson, A. (2020, December 20). South Africans Are Turning Their Offline Businesses into Online Ones in the Face of Covid-19 Closures. Available online: https:\/\/www.mendeley.com\/catalogue\/253605fb-2268-38b2-947b-53571cd307e8\/?utm_source=desktop&utm_medium=1.19.6&utm_campaign=open_catalog&userDocumentId=%7Bafabe5a4-d112-4acf-b37f-8429a95db8fc%7D."},{"key":"ref_16","doi-asserted-by":"crossref","first-page":"70","DOI":"10.37380\/jisib.v7i1.216","article-title":"Business intelligence and SMEs: Bridging the gap","volume":"7","author":"Papachristodoulou","year":"2017","journal-title":"J. Intell. Stud. Bus."},{"key":"ref_17","first-page":"328","article-title":"Vulnerability assessment and penetration testing","volume":"4","author":"Gupta","year":"2013","journal-title":"Int. J. Eng. Trends Technol."},{"key":"ref_18","unstructured":"Mirai Security Inc. (2020, August 03). Security Frameworks for Small Enterprise. Available online: https:\/\/www.miraisecurity.com\/blog\/security-frameworks-for-small-enterprise."},{"key":"ref_19","unstructured":"Boonsiritomachai, W., McGrath, M., and Burgess, S. (2014, January 16\u201318). A research framework for the adoption of Business Intelligence by Small and Medium-Sized enterprises. Proceedings of the 27th Annual SEAANZ Proceedings for Small Enterprise Association of Australia and New Zealand Conference, Sydney, Australia."},{"key":"ref_20","unstructured":"Export Enterprises SA (2021, January 21). The Economic Context of South Africa. Available online: https:\/\/www.nordeatrade.com\/fi\/explore-new-market\/south-africa\/economical-context."},{"key":"ref_21","unstructured":"STATS SA (2020, December 15). Economic Sectors that Contribute to South Africa\u2019s GDP: Q3 2017, Available online: http:\/\/www.statssa.gov.za\/?p=10775#:~:text=Thelargestcontributortogrowth,percentagepointtoGDPgrowth.%0A."},{"key":"ref_22","unstructured":"Geldenhuys, J. (2020, December 15). Internet Access: Survey Reveals South African Connectivity Statistics. Available online: https:\/\/www.moonstone.co.za\/internet-access-survey-reveals-south-african-connectivity-statistics."},{"key":"ref_23","unstructured":"International Trade Administration (2020, December 17). South Africa\u2014Country Commercial Guide: Information Technology, Available online: https:\/\/www.trade.gov\/knowledge-product\/south-africa-information-technology."},{"key":"ref_24","unstructured":"STATS SA (2020, January 23). General Household Survey 2017, Available online: https:\/\/www.statssa.gov.za\/publications\/P0318\/P03182017.pdf."},{"key":"ref_25","unstructured":"Modimogale, L., and Kroeze, J.H. (2009, January 9\u201310). Using ICTs to Become a Competitive SME in South Africa. Proceedings of the 13th International Business Information Management Association Conference (13th IBIMA), Marrakech, Morocco."},{"key":"ref_26","unstructured":"Hislop, R. (2021, January 21). Ideas for Solving Rural South African Internet Connection. Available online: https:\/\/www.ee.co.za\/article\/ideas-for-solving-rural-south-african-internet-connection.html."},{"key":"ref_27","unstructured":"STATS SA (2020, January 21). Category Archives: Economic Growth; Pretoria, South Africa, Available online: http:\/\/www.statssa.gov.za\/?cat=30."},{"key":"ref_28","first-page":"79","article-title":"Security threats on cloud computing vulnerabilities","volume":"5","author":"Chou","year":"2013","journal-title":"Int. J. Comput. Sci. Inf. Technol."},{"key":"ref_29","doi-asserted-by":"crossref","first-page":"618","DOI":"10.1016\/j.ijinfomgt.2016.03.005","article-title":"Towards performance evaluation of cloud service providers for cloud data security","volume":"36","author":"Ramachandran","year":"2016","journal-title":"Int. J. Inf. Manag."},{"key":"ref_30","first-page":"103","article-title":"Vulnerability assessment enhancement for middleware for computing and informatics","volume":"31","author":"Serrano","year":"2012","journal-title":"Comput. Inform."},{"key":"ref_31","unstructured":"Rajan, A., and Erturk, E. (2020, July 07). Web Vulnerability Scanners: A Case Study. Eastern Institute of Technology, Hawke\u2019s Bay. Available online: https:\/\/arxiv.org\/ftp\/arxiv\/papers\/1706\/1706.08017.pdf."},{"key":"ref_32","doi-asserted-by":"crossref","unstructured":"Kupsch, J.A., Miller, B.P., Heymann, E., and Cesar, E. (2010, January 8). First Principles Vulnerability Assessment. Proceedings of the 2010 ACM Workshop on Cloud Computing security, the 17th ACM Conference on Computer and Communications Security, Chicago, IL, USA.","DOI":"10.1145\/1866835.1866852"},{"key":"ref_33","first-page":"25","article-title":"Cloud Computing and Security Issues in the Cloud","volume":"6","author":"Ahmed","year":"2014","journal-title":"Int. J. Netw. Secur. Appl."},{"key":"ref_34","unstructured":"Cloud Security Alliance (2020, June 23). Cloud Computing Top Threats in 2016: Treacherous 1. Available online: http:\/\/oemhub.bitdefender.com\/top-threats-to-securing-the-cloud."},{"key":"ref_35","doi-asserted-by":"crossref","first-page":"194","DOI":"10.1016\/j.procs.2017.11.027","article-title":"Business Intelligence and Analytics in Small and Medium-Sized Enterprises: A Systematic Literature Review","volume":"121","author":"Llave","year":"2017","journal-title":"Procedia Comput. Sci."},{"key":"ref_36","first-page":"819","article-title":"Key Benefits of Cloud Business Intelligence: A Systematic Literature Review","volume":"9","author":"Indriasari","year":"2018","journal-title":"Int. J. Mech. Eng. Technol."},{"key":"ref_37","first-page":"1","article-title":"A Framework for Assessing Security in a SaaS Cloud Paradigm for SMEs","volume":"1","author":"Rupra","year":"2019","journal-title":"Mara Int. J. Sci. Res. Publ."},{"key":"ref_38","first-page":"11","article-title":"A Security Framework in Cloud Computing Infrastructure","volume":"5","author":"Ukil","year":"2013","journal-title":"Int. J. Netw. Secur. Appl."},{"key":"ref_39","first-page":"147","article-title":"Introducing the information security management system in Cloud Computing Environment","volume":"12","author":"Tot","year":"2015","journal-title":"Acta Polytech. Hung."},{"key":"ref_40","unstructured":"Panti\u0107, Z., and Babar, M.A. (2020, April 18). Guidelines for Building a Private Cloud Infrastructure. Available online: http:\/\/nexgsd.org\/wp-content\/uploads\/2012\/05\/Guidelines-to-BuildingPrivateCloud-Infrastructure-Technical-Report.pdf."},{"key":"ref_41","first-page":"622","article-title":"A Survey on Cloud Computing Security Threats and Vulnerabilities","volume":"2","author":"Kumar","year":"2014","journal-title":"Int. J. Innov. Res. Electr. Electron. Instrum. Control Eng."},{"key":"ref_42","first-page":"258","article-title":"Framework for cloud computing adoption: A roadmap for SMEs to cloud migration","volume":"5","author":"Khan","year":"2015","journal-title":"Int. J. Cloud Comput. Serv. Archit."},{"key":"ref_43","first-page":"398","article-title":"Evaluation Framework on System Security Requirements for Government-Owned Agencies in the Philippines","volume":"6","author":"Calumpang","year":"2016","journal-title":"Int. J. Inf. Educ. Technol."},{"key":"ref_44","doi-asserted-by":"crossref","first-page":"105","DOI":"10.2478\/fman-2013-0006","article-title":"Cloud Business Intelligence for SMEs Consortium","volume":"4","author":"Rostek","year":"2012","journal-title":"Found. Manag."},{"key":"ref_45","unstructured":"European Union Agency for Network and Information Security (2020, August 21). Security Framework for Governmental Clouds. Available online: http:\/\/www.enisa.europa.eu\/activities\/Resilience-and-CIIP\/cloud-computing\/governmental-cloud-security\/security-framework-for-govenmental-clouds."},{"key":"ref_46","first-page":"1","article-title":"Evaluating the factors that influence cloud technology adoption: A comparative case analysis of health and non-health sectors: A systematic review","volume":"33","author":"Sadoughi","year":"2019","journal-title":"Health Inform. J."},{"key":"ref_47","doi-asserted-by":"crossref","unstructured":"Johnson, T.P. (2005). Snowball Sampling. Encyclopedia of Biostatistics, Wiley & Sons, Ltd.","DOI":"10.1002\/0470011815.b2a16070"},{"key":"ref_48","first-page":"230","article-title":"Researching Internet-Based Populations: Advantages and Disadvantages of Online Survey Research, Online Questionnaire Authoring Software Packages, and Web Survey Services","volume":"10","author":"Wright","year":"2005","journal-title":"J. Comput. Commun."},{"key":"ref_49","unstructured":"Krippendorff, K. (2013). Content Analysis. An Introduction to Its Methodology, Sage Publications. [3rd ed.]."},{"key":"ref_50","doi-asserted-by":"crossref","first-page":"1273","DOI":"10.1007\/s11165-016-9602-2","article-title":"The Use of Cronbach\u2019s Alpha When Developing and Reporting Research Instruments in Science Education","volume":"2018","author":"Taber","year":"2018","journal-title":"Res. Sci. Educ."},{"key":"ref_51","doi-asserted-by":"crossref","first-page":"229","DOI":"10.1016\/0304-3800(95)00152-2","article-title":"Testing ecological models: The meaning of validation","volume":"90","author":"Rykiel","year":"1996","journal-title":"Ecol. Model."},{"key":"ref_52","doi-asserted-by":"crossref","unstructured":"Crocker, L. (2015). Content Validity. International Encyclopedia of the Social & Behavioral Sciences, Elsevier Ltd.","DOI":"10.1016\/B978-0-08-097086-8.44011-0"},{"key":"ref_53","unstructured":"Al Nadab, Z. (2017). A Validation Framework for an Online English Language Exit Test: A Case Study Using Moodle as an Assessment Management System. [Master\u2019s Thesis, The University of Queensland]."},{"key":"ref_54","doi-asserted-by":"crossref","first-page":"49","DOI":"10.21315\/eimj2019.11.2.6","article-title":"ABC of Content Validation and Content Validity Index Calculation","volume":"11","author":"Yusoff","year":"2019","journal-title":"Educ. Med. J."},{"key":"ref_55","first-page":"12","article-title":"Content validation: The forgotten step-child or a crucial step in assessment centre validation?","volume":"39","author":"Roodt","year":"2013","journal-title":"S. Afr. J. Ind. Psychol."},{"key":"ref_56","first-page":"1","article-title":"Feature Cloud Risk: 10 Principles and a Framework for Assessment","volume":"5","author":"Vohradsky","year":"2012","journal-title":"ISACA J."},{"key":"ref_57","unstructured":"European Union Agency for Network and Information Security (2020, October 23). Guidelines for SMEs on the Security of Personal Data Processing. Available online: www.enisa.europa.eu."},{"key":"ref_58","unstructured":"Perkins, J. (2017, October 26). Information Security Policy, Available online: https:\/\/www2.gov.bc.ca\/assets\/gov\/british-columbians-our-governments\/services-policies-for-government\/policies-procedures\/information-security-policy\/isp.pdf."},{"key":"ref_59","first-page":"1","article-title":"It\u2019s a jungle out there? Cloud computing, standards and the law","volume":"5","author":"Gleeson","year":"2014","journal-title":"Eur. J. Law Technol."},{"key":"ref_60","first-page":"S219","article-title":"Moving from Evaluation to Trial: How do SMEs start adopting Cloud ERP?","volume":"2015","author":"Salim","year":"2015","journal-title":"Australas. J. Inf. Syst."},{"key":"ref_61","first-page":"3","article-title":"The Adoption of Cloud Computing by Irish SMEs\u2014An Exploratory Study","volume":"17","author":"Carcary","year":"2014","journal-title":"Electron. J. Inf. Syst. Eval."},{"key":"ref_62","first-page":"52","article-title":"A Survey of Cloud Computing Security Challenges and Solutions","volume":"14","author":"Hussein","year":"2016","journal-title":"Int. J. Comput. Sci. Inf. Secur."},{"key":"ref_63","unstructured":"Information Security Forum (2020, June 26). Standard of Good Practice for Information Security. Available online: https:\/\/www.securityforum.org\/uploads\/2016\/07\/SoGP-2016-Exec-Summary-FINAL-260716.pdf."},{"key":"ref_64","doi-asserted-by":"crossref","first-page":"666","DOI":"10.3926\/ic.726","article-title":"Analysis of factors that influence the ICT adoption by SMEs in Colombia","volume":"12","year":"2016","journal-title":"Intang. Cap."},{"key":"ref_65","doi-asserted-by":"crossref","first-page":"24","DOI":"10.1016\/j.future.2015.09.031","article-title":"Cloud Computing Adoption Framework: A Security Framework for Business Clouds","volume":"57","author":"Chang","year":"2015","journal-title":"Futur. Gener. Comput. Syst."},{"key":"ref_66","doi-asserted-by":"crossref","first-page":"12032","DOI":"10.3390\/su70912032","article-title":"Information Security Management as a Bridge in Cloud Systems from Private to Public Organizations","volume":"7","author":"Choi","year":"2015","journal-title":"Sustainability"},{"key":"ref_67","unstructured":"Durg, K., and Podder, S. (2020, August 29). Navigating the Interoperability Challenge in Multi-Cloud Environments. Available online: https:\/\/www.accenture.com\/us-en\/blogs\/cloud-computing\/kishore-durg-cloud-interoperability-challenges."},{"key":"ref_68","unstructured":"European Network and Information Security Agency (2012). Cloud Computing\u2014Benefits, Risks and Recommendations for Information Security. Computing, 72, 1\u201350."},{"key":"ref_69","first-page":"487","article-title":"A Framework for Secure Cloud Computing","volume":"9","author":"Youssef","year":"2012","journal-title":"Int. J. Comput. Sci."},{"key":"ref_70","unstructured":"Cloud Industry Forum (2020, September 23). 8 Criteria to Ensure You Select the Right Cloud Service Provider. Available online: https:\/\/www.cloudindustryforum.org\/content\/8-criteria-ensure-you-select-right-cloud-service-provider."},{"key":"ref_71","unstructured":"Heiser, J. (2019, December 05). How to Evaluate Cloud Service Provider Security. Available online: https:\/\/www.gartner.com\/en\/doc\/3833968-how-to-evaluate-cloud-service-provider-security."},{"key":"ref_72","first-page":"1","article-title":"Critical analysis of vendor lock-in and its impact on cloud computing migration: A business perspective","volume":"5","author":"Sahandi","year":"2016","journal-title":"J. Cloud Comput. Adv. Syst. Appl."},{"key":"ref_73","first-page":"128","article-title":"Information Security Standards","volume":"3","author":"Tofan","year":"2011","journal-title":"J. Mob. Embed. Distrib. Syst."},{"key":"ref_74","doi-asserted-by":"crossref","unstructured":"Vacca, J.R. (2017). Security in the Private Cloud, Taylor and Francis Group, LLC. [1st ed.].","DOI":"10.1201\/9781315372211"},{"key":"ref_75","unstructured":"Shimamoto, C.D. (2020, August 20). How to Evaluate Cloud Security?. Available online: https:\/\/www.techsoup.org\/support\/articles-and-how-tos\/how-to-evaluate-cloud-security."},{"key":"ref_76","unstructured":"National Computing Centre Group (2020, July 16). The Hidden Cost of Cloud Failure. Available online: https:\/\/www.nccgroup.trust\/uk\/about-us\/newsroom-and-events\/blogs\/2019\/november\/the-hidden-cost-of-cloud-failure\/."},{"key":"ref_77","first-page":"1","article-title":"Business intelligence in the cloud: Fundamentals for a service-based evaluation concept","volume":"1049","author":"Ereth","year":"2013","journal-title":"Innov. Bus. Intell. Forsch."},{"key":"ref_78","first-page":"90","article-title":"Business intelligence over the Cloud","volume":"5","author":"Hooda","year":"2014","journal-title":"Int. J. Manag."},{"key":"ref_79","unstructured":"Tamer, C., Kiley, M., Ashrafi, N., and Kuilboer, J.P. (2013, January 5\u20137). Risks and Benefits of Business Intelligence in the Cloud. Proceedings of the Northeast Decision Sciences Institute Annual Meeting, New York, NY, USA."}],"container-title":["Information"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/2078-2489\/12\/3\/128\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,11]],"date-time":"2025-10-11T05:37:01Z","timestamp":1760161021000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/2078-2489\/12\/3\/128"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,3,17]]},"references-count":79,"journal-issue":{"issue":"3","published-online":{"date-parts":[[2021,3]]}},"alternative-id":["info12030128"],"URL":"https:\/\/doi.org\/10.3390\/info12030128","relation":{},"ISSN":["2078-2489"],"issn-type":[{"value":"2078-2489","type":"electronic"}],"subject":[],"published":{"date-parts":[[2021,3,17]]}}}