Technical vulnerabilities are but a part of the cloud security equation. Privacy and governance concerns also influence decision-making, especially within government contexts.
Ukeje et al. (5) analyze information security and privacy challenges affecting government cloud adoption using a systematic PRISMA methodology. After screening hundreds of studies, they conclude that approximately 70% of major adoption barriers are directly linked to security and privacy concerns. Governments manage highly sensitive data related to national security, public health, taxation, and citizen records. The potential consequences of a breach extend far beyond financial loss to political and social instability.
Jurisdictional challenges further complicate adoption. When cloud data is stored across national borders, it may then become subject to the foreign legal systems in which it resides. And conflicts between national regulations can create uncertainty regarding lawful access requests and data sovereignty. Gonzalez et al. (1) note that governance and legal issues receive comparatively less research attention than technical vulnerabilities, suggesting an imbalance in current scholarship.
With the absence of comprehensive frameworks that are specifically tailored for the public sector, cloud implementation continues to be hesitant. Governments require clear accountability structures, transparent provider practices, and robust compliance mechanisms. Without structured governance models, technical safeguards alone are insufficient to build trust.