Development and Evaluation of a Holistic Framework and Maturity Assessment Tools for Data Governance in Cloud Computing Environments

Cloud computing is an emerging technology that is changing the way that public sector organisations consume Information and Communication Technology (ICT) in different countries. The adoption rate of cloud computing services is still very low to none in many countries. Saudi Arabia, for instance, despite their huge investments in the Digital Transformation, as part of the recent Vision 2030, the loss of governance and control of data is one of their major barriers facing the adoption of cloud computing services. Cloud Data Governance, is not only a Saudi concern, it is actually a worldwide challenge, which is under researched and mostly not practiced. This research attempted, for the first time to unlock this challenge in Saudi Arabia, more specifically, for the Public Sector, by advancing research in this field and proposing means by which Cloud Data Governance programmes can be implemented. In this research, existing data governance frameworks were analysed – these frameworks were limited as they lacked consideration of the cloud computing perspective. Hence, the purpose of this research is to develop a generalised Strategy Framework that can be utilised to design, deploy and sustain an effective cloud data governance programme; it also aims to provide knowledge for organisations that wish to apply a cloud data governance programme, to empower them to control their data in cloud environments. Understanding data governance taxonomy and its key dimensions for non-cloud and cloud computing was an important step in developing the proposed Framework. To support the development of the proposed Framework, the Analytic Theory and concept of Critical Success Factors (CSFs) were adopted. The Framework includes a number of complex operations, therefore, to ensure an effective Cloud Data Governance programme, organisations need to have means by which they can assess their current state and define their requirements. To facilitate this, a Maturity Model was proposed together with an Assessment Matrix. The proposed Framework and Maturity Model alongside the Assessment Matrix, were then validated and evaluated for the Public Sector in Saudi Arabia, as a Case Study. Mixed research methods, Qualitative and Quantitative, were adopted for this purpose, where the State of the Art of cloud adoption, data governance and cloud data governance, in the Saudi Public Sector were all analysed. Moreover, a number of Barriers and Critical Success Factors were identified for the case study. For validation purposes, the Focus Group approach was adopted, with appropriate representations from the Saudi Public Sector. The Structural Equation Modelling was adopted for the evaluation of the proposed Framework, using quantitative results from the questionnaire. The Evaluation of the Assessment Matrix was done by developing a Tool, which allows organisations to identify their levels of maturity for cloud data governance programmes, and define requirements for target levels.