{"id":"https://openalex.org/W2415053640","doi":"https://doi.org/10.2308/isys-51494","title":"Business in the Cloud: Research Questions on Governance, Audit, and Assurance","display_name":"Business in the Cloud: Research Questions on Governance, Audit, and Assurance","publication_year":2016,"publication_date":"2016-06-01","ids":{"openalex":"https://openalex.org/W2415053640","doi":"https://doi.org/10.2308/isys-51494","mag":"2415053640"},"language":"en","primary_location":{"id":"doi:10.2308/isys-51494","is_oa":false,"landing_page_url":"https://doi.org/10.2308/isys-51494","pdf_url":null,"source":{"id":"https://openalex.org/S82262387","display_name":"Journal of Information Systems","issn_l":"0888-7985","issn":["0888-7985","1558-7959"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310316290","host_organization_name":"American Accounting Association","host_organization_lineage":["https://openalex.org/P4310316290"],"host_organization_lineage_names":["American Accounting Association"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Information Systems","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5061793642","display_name":"Pamela Schmidt","orcid":"https://orcid.org/0000-0001-9136-1941"},"institutions":[{"id":"https://openalex.org/I127339705","display_name":"Washburn University","ror":"https://ror.org/04sk2ar21","country_code":"US","type":"education","lineage":["https://openalex.org/I127339705"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Pamela J. Schmidt","raw_affiliation_strings":["Washburn University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Washburn University","institution_ids":["https://openalex.org/I127339705"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5010349489","display_name":"Jason Wood","orcid":null},"institutions":[{"id":"https://openalex.org/I4210102765","display_name":"PricewaterhouseCoopers (South Korea)","ror":"https://ror.org/01mbh6s37","country_code":"KR","type":"company","lineage":["https://openalex.org/I4210102765","https://openalex.org/I4210133790"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Jason T. Wood","raw_affiliation_strings":["PricewaterhouseCoopers"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"PricewaterhouseCoopers","institution_ids":["https://openalex.org/I4210102765"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5049204591","display_name":"Severin V. Grabski","orcid":null},"institutions":[{"id":"https://openalex.org/I87216513","display_name":"Michigan State University","ror":"https://ror.org/05hs6h993","country_code":"US","type":"education","lineage":["https://openalex.org/I87216513"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Severin V. Grabski","raw_affiliation_strings":["Michigan State University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Michigan State University","institution_ids":["https://openalex.org/I87216513"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":5.5229,"has_fulltext":false,"cited_by_count":24,"citation_normalized_percentile":{"value":0.95820158,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":99},"biblio":{"volume":"30","issue":"3","first_page":"173","last_page":"189"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11614","display_name":"Cloud Data Security Solutions","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11614","display_name":"Cloud Data Security Solutions","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10101","display_name":"Cloud Computing and Resource Management","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10270","display_name":"Blockchain Technology Applications and Security","score":0.9973999857902527,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.8678216934204102},{"id":"https://openalex.org/keywords/audit","display_name":"Audit","score":0.6208248138427734},{"id":"https://openalex.org/keywords/corporate-governance","display_name":"Corporate governance","score":0.6030578017234802},{"id":"https://openalex.org/keywords/cloud-computing-security","display_name":"Cloud computing security","score":0.5803185701370239},{"id":"https://openalex.org/keywords/process-management","display_name":"Process management","score":0.5332673788070679},{"id":"https://openalex.org/keywords/interdependence","display_name":"Interdependence","score":0.5064841508865356},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.4751434326171875},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.47489920258522034},{"id":"https://openalex.org/keywords/service-provider","display_name":"Service provider","score":0.46013349294662476},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.4393921196460724},{"id":"https://openalex.org/keywords/flexibility","display_name":"Flexibility (engineering)","score":0.41598597168922424},{"id":"https://openalex.org/keywords/business-process","display_name":"Business process","score":0.41514313220977783},{"id":"https://openalex.org/keywords/knowledge-management","display_name":"Knowledge management","score":0.4148768484592438},{"id":"https://openalex.org/keywords/service","display_name":"Service (business)","score":0.4071934223175049},{"id":"https://openalex.org/keywords/accounting","display_name":"Accounting","score":0.2321963906288147},{"id":"https://openalex.org/keywords/marketing","display_name":"Marketing","score":0.12672236561775208},{"id":"https://openalex.org/keywords/finance","display_name":"Finance","score":0.09451904892921448},{"id":"https://openalex.org/keywords/management","display_name":"Management","score":0.08250898122787476}],"concepts":[{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.8678216934204102},{"id":"https://openalex.org/C199521495","wikidata":"https://www.wikidata.org/wiki/Q181487","display_name":"Audit","level":2,"score":0.6208248138427734},{"id":"https://openalex.org/C39389867","wikidata":"https://www.wikidata.org/wiki/Q380767","display_name":"Corporate governance","level":2,"score":0.6030578017234802},{"id":"https://openalex.org/C184842701","wikidata":"https://www.wikidata.org/wiki/Q370563","display_name":"Cloud computing security","level":3,"score":0.5803185701370239},{"id":"https://openalex.org/C195094911","wikidata":"https://www.wikidata.org/wiki/Q14167904","display_name":"Process management","level":1,"score":0.5332673788070679},{"id":"https://openalex.org/C185874996","wikidata":"https://www.wikidata.org/wiki/Q269699","display_name":"Interdependence","level":2,"score":0.5064841508865356},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.4751434326171875},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.47489920258522034},{"id":"https://openalex.org/C116537","wikidata":"https://www.wikidata.org/wiki/Q2169973","display_name":"Service provider","level":3,"score":0.46013349294662476},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.4393921196460724},{"id":"https://openalex.org/C2780598303","wikidata":"https://www.wikidata.org/wiki/Q65921492","display_name":"Flexibility (engineering)","level":2,"score":0.41598597168922424},{"id":"https://openalex.org/C85345410","wikidata":"https://www.wikidata.org/wiki/Q851587","display_name":"Business process","level":3,"score":0.41514313220977783},{"id":"https://openalex.org/C56739046","wikidata":"https://www.wikidata.org/wiki/Q192060","display_name":"Knowledge management","level":1,"score":0.4148768484592438},{"id":"https://openalex.org/C2780378061","wikidata":"https://www.wikidata.org/wiki/Q25351891","display_name":"Service (business)","level":2,"score":0.4071934223175049},{"id":"https://openalex.org/C121955636","wikidata":"https://www.wikidata.org/wiki/Q4116214","display_name":"Accounting","level":1,"score":0.2321963906288147},{"id":"https://openalex.org/C162853370","wikidata":"https://www.wikidata.org/wiki/Q39809","display_name":"Marketing","level":1,"score":0.12672236561775208},{"id":"https://openalex.org/C10138342","wikidata":"https://www.wikidata.org/wiki/Q43015","display_name":"Finance","level":1,"score":0.09451904892921448},{"id":"https://openalex.org/C187736073","wikidata":"https://www.wikidata.org/wiki/Q2920921","display_name":"Management","level":1,"score":0.08250898122787476},{"id":"https://openalex.org/C174998907","wikidata":"https://www.wikidata.org/wiki/Q357662","display_name":"Work in process","level":2,"score":0.0},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.2308/isys-51494","is_oa":false,"landing_page_url":"https://doi.org/10.2308/isys-51494","pdf_url":null,"source":{"id":"https://openalex.org/S82262387","display_name":"Journal of Information Systems","issn_l":"0888-7985","issn":["0888-7985","1558-7959"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310316290","host_organization_name":"American Accounting Association","host_organization_lineage":["https://openalex.org/P4310316290"],"host_organization_lineage_names":["American Accounting Association"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Information Systems","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":32,"referenced_works":["https://openalex.org/W23938314","https://openalex.org/W48467305","https://openalex.org/W73182198","https://openalex.org/W179895364","https://openalex.org/W598046090","https://openalex.org/W631120759","https://openalex.org/W1493645886","https://openalex.org/W1604903049","https://openalex.org/W1966038528","https://openalex.org/W1977367431","https://openalex.org/W2060584096","https://openalex.org/W2073990443","https://openalex.org/W2100333141","https://openalex.org/W2104829540","https://openalex.org/W2117565593","https://openalex.org/W2119888672","https://openalex.org/W2151329337","https://openalex.org/W2156944124","https://openalex.org/W2170931064","https://openalex.org/W2275530856","https://openalex.org/W2407267752","https://openalex.org/W2480835621","https://openalex.org/W2622548307","https://openalex.org/W2740901904","https://openalex.org/W3125469300","https://openalex.org/W4235328403","https://openalex.org/W4236993474","https://openalex.org/W4247625731","https://openalex.org/W4255050355","https://openalex.org/W6607189340","https://openalex.org/W6684835321","https://openalex.org/W6714158684"],"related_works":["https://openalex.org/W2749324135","https://openalex.org/W114687057","https://openalex.org/W2908433117","https://openalex.org/W2969604939","https://openalex.org/W2378306841","https://openalex.org/W3122988618","https://openalex.org/W1994631104","https://openalex.org/W3146908316","https://openalex.org/W2382776042","https://openalex.org/W4285586361"],"abstract_inverted_index":{"ABSTRACT":[0],"Cloud":[1],"computing":[2,36,55,72,144],"services":[3,37,110],"are":[4,159],"finding":[5],"rapid":[6],"adoption":[7],"as":[8,87],"organizations":[9],"seek":[10],"cost":[11],"reduction,":[12],"technical":[13],"expertise,":[14],"flexibility,":[15],"and":[16,32,57,68,76,82,101,123,141],"adaptable":[17],"mechanisms":[18],"to":[19,45,90,136],"attain":[20],"advantages":[21],"in":[22,42,107],"fast-moving":[23],"business":[24],"environments.":[25],"The":[26,113,146],"related":[27],"considerations":[28],"of":[29,34,96,116],"governance,":[30],"audit,":[31],"assurance":[33],"cloud":[35,48,54,71,109,121,124,143,164,171],"might":[38],"be":[39,104],"inadvertently":[40],"overlooked":[41],"a":[43,88,138,163],"rush":[44],"adopt":[46],"these":[47],"services.":[49],"This":[50],"paper":[51],"focuses":[52],"on":[53],"governance":[56,133],"audit":[58,147],"issues":[59,95],"by":[60,65],"presenting":[61],"research":[62,92],"questions":[63],"informed":[64],"both":[66],"practice":[67],"research.":[69],"A":[70],"ecosystem":[73],"is":[74,85,134,149],"presented":[75],"an":[77,127],"IT":[78],"Governance":[79],"framework":[80],"(Wilkin":[81],"Chenhall":[83],"2010)":[84],"referenced":[86],"means":[89],"structure":[91],"questions.":[93],"Key":[94],"risk,":[97],"security,":[98],"monitoring,":[99],"control,":[100],"compliance":[102],"should":[103],"considered":[105],"early":[106],"the":[108,120,152],"decision":[111],"process.":[112],"tight":[114],"coupling":[115],"intercompany":[117],"operations":[118],"between":[119],"client":[122],"provider(s)":[125],"forms":[126],"interdependent,":[128],"operationally":[129],"coupled":[130],"ecosystem.":[131],"Planned":[132],"needed":[135],"achieve":[137],"well-governed,":[139],"functional,":[140],"secure":[142],"environment.":[145],"role":[148],"complicated":[150],"when":[151],"organization's":[153],"financial":[154],"data":[155],"and/or":[156],"critical":[157],"applications":[158],"hosted":[160],"externally":[161],"with":[162],"service":[165,172],"provider":[166],"that":[167],"may":[168],"use":[169],"other":[170],"providers.":[173]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":4},{"year":2024,"cited_by_count":2},{"year":2022,"cited_by_count":2},{"year":2021,"cited_by_count":2},{"year":2020,"cited_by_count":4},{"year":2019,"cited_by_count":5},{"year":2018,"cited_by_count":2},{"year":2017,"cited_by_count":1}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}