Trust-Driven Governance for Secure Enterprise Delivery
DOI:
https://doi.org/10.5281/m1mps457Keywords:
Cloud Computing, Cloud Intelligence, Administrative and Access Governance, Trust Management, Trust-Centricity, Cooperative and Autonomous agents, Software as a Service, Software Supply Chain, Enterprise Software Security.Abstract
Delivering corporate-sensitive, data-rich information and seamless access to enterprise software for employees, business partners, and external contractors through cloud environments offers firms substantial potential benefits. These advantages, however, have also given rise to black swan events—unexpected, highly damaging incidents rooted in thin or even non-existent risk management processes and procedures. This situation demands a rethinking of legacy information governance concepts and solutions originally designed for traditional, perimeter-protected corporate environments. A fundamental digital transformation is therefore becoming essential, one that must drive both technical and managerial change grounded in agility, scalability, flexibility, robust business continuity planning, and regulatory compliance. As a result, concerns over corporate information security and trust have intensified sharply in recent years. Addressing both dimensions together calls for a thorough examination of how governance processes and procedures can be supported through a trust-centric cloud intelligence management model.
This paper presents a conceptual framework that supports an autonomous access governance solution. Grounded in a trust-centric cloud intelligence approach, the proposed framework aims to narrow the gap between internal and third-party management and business functions during software deployment and use. Cloud-based services are frequently requested and adopted without IT function approval, thereby violating existing corporate digital governance frameworks—frameworks specifically designed to ensure business continuity and legal compliance.
References
1. Cao, Y., Pokhrel, S. R., Zhu, Y., & Doss, R. (2024). Automation and orchestration of zero trust architecture: Potential solutions and challenges. Machine Intelligence Research, 21, 294–317.
2. Fernandez, E. B., & Brazhuk, A. (2024). A critical analysis of zero trust architecture (ZTA). Computer Standards & Interfaces, 89, Article 103832.
3. He, Y., Huang, D., Chen, L., Ni, Y., & Ma, X. (2022). A survey on zero trust architecture: Challenges and future trends. Wireless Communications and Mobile Computing, 2022, Article 6476274.
4. Mashetty, S. (2024). Leveraging Deep Learning, Neural Networks, and Data Engineering for Intelligent Mortgage Loan Validation: A Data-Driven Approach to Automating Borrower Income, Employment, and Asset Verification. Neural Networks, and Data Engineering for Intelligent Mortgage Loan Validation: A Data-Driven Approach to Automating Borrower Income, Employment, and Asset Verification (December 21, 2024).
5. Liu, C., Tan, R., Wu, Y., Feng, Y., Jin, Z., Zhang, F., Liu, Y., et al. (2024). Dissecting zero trust: Research landscape and its implementation in IoT. Cybersecurity, 7, Article 20.
6. Nahar, N., Andersson, K., Schelén, O., & Saguna, S. (2024). A survey on zero trust architecture: Applications and challenges of 6G networks. IEEE Access, 12, 94753–94764.
7. Mahadevan, S. (2024). Empowering Manufacturing: Generative AI Revolutionizes ERP Application. Int. J. Innov. Sci. Res, 9, 593-595.
8. Rajapakse, R. N., Zahedi, M., Babar, M. A., & Shen, H. (2022). Challenges and solutions when adopting DevSecOps: A systematic review. Information and Software Technology, 141, Article 106700.
9. Reichert, B. M., & Obelheiro, R. R. (2024). Software supply chain security: A systematic literature review. International Journal of Computers and Applications, 46(10), 853–867.
10. Manukonda, K. R. R. (2024). Chapter-5 Enhancing Test Automation Efficiency Through AI-driven Reporting: An Empirical Study on Defect Detection and Resolution Time. ADVANCES IN, 119, 107.
11. Syed, N. F., Shah, S. W., Shaghaghi, A., Anwar, A., Baig, Z., & Doss, R. (2022). Zero trust architecture (ZTA): A comprehensive survey. IEEE Access, 10, 57143–57179.
12. Identifying the primary dimensions of DevSecOps: A multi-vocal literature review. (2024). Journal of Systems and Software, 214, Article 112063.
13. Alshaikh, M. (2021). Developing cybersecurity culture to influence employee behavior: A practice perspective. Computers & Security, 98, Article 102003.
14. Sreenivasulu Naidu Yalakaturi. (2024). AI-Assisted Reference Data Harmonization Across Global Data Center Systems. Journal of Computational Analysis and Applications (JoCAAA), 33(08), 9576–9587. Retrieved from https://eudoxuspress.com/index.php/pub/article/view/5790
15. World Economic Forum. (2023). Global cybersecurity outlook 2023. World Economic Forum.
16. Bada, M., Sasse, A. M., & Nurse, J. R. C. (2019). Cyber security awareness campaigns: Why do they fail to change behaviour? arXiv preprint.
17. Burch, G. F., Burch, J., & McGarry, M. (2024). Cybersecurity risk management governance: An agency theory perspective. ISACA Journal.
18. KOLLA, S. K. (2024). DEEP LEARNING AND CLINICAL NLP FRAMEWORK FOR AUTOMATED KNOWLEDGE EXTRACTION FROM MULTIMODAL HEALTH . TPM – Testing, Psychometrics, Methodology in Applied Psychology, 31(S2), 134–140. Retrieved from https://tpmap.org/submission/index.php/tpm/article/view/4748
19. Ebert, C., Gallardo, G., Hernantes, J., & Serrano, N. (2021). DevOps. IEEE Software, 38(3), 7–15.
20. Shah, S. W., Syed, N. F., Shaghaghi, A., Anwar, A., Baig, Z., & Doss, R. (2022). Zero trust architecture: A comprehensive survey. IEEE Access, 10, 57143–57179.
21. Movva, V. R. (2024). Cloud-Native Platform Engineering for High-Scale Retail Systems: Designing Resilient Microservices and Intelligent Infrastructure. Available at SSRN 7449480.
22. NIST. (2024). The NIST cybersecurity framework (CSF) 2.0. National Institute of Standards and Technology.
23. NIST. (2022). Secure software development framework (SSDF) version 1.1: Recommendations for mitigating the risk of software vulnerabilities (Special Publication 800-218). National Institute of Standards and Technology.
24. Rohit Gorle. (2024). Deep Learning Approaches for Threat Detection in Multi-Cloud Environments. Journal of Computational Analysis and Applications (JoCAAA), 33(07), 3857–3864. Retrieved from https://eudoxuspress.com/index.php/pub/article/view/5879
25. NIST. (2022). Guidelines for minimum standards for developer verification of software (Special Publication 800-218A). National Institute of Standards and Technology.
26. NIST. (2021). Security and privacy controls for information systems and organizations (Special Publication 800-53, Revision 5). National Institute of Standards and Technology.
27. Yandamuri, U. S. (2024). AI-Driven Decision Support Systems for Operational Optimization in Hospitality Technology. Metallurgical and Materials Engineering.
28. NIST. (2021). Cybersecurity supply chain risk management practices for systems and organizations (Special Publication 800-161, Revision 1). National Institute of Standards and Technology.
29. NIST. (2023). Zero trust architecture model for access control in cloud-native applications in multi-cloud environments (Special Publication 800-207A). National Institute of Standards and Technology.
30. Mangalampalli, B. M. Generative AI Applications In Healthcare Data Mart Design And Optimization.
31. European Union Agency for Cybersecurity. (2021). ENISA threat landscape 2021. Publications Office of the European Union.
32. European Union Agency for Cybersecurity. (2022). ENISA threat landscape 2022. Publications Office of the European Union.
33. European Union Agency for Cybersecurity. (2023). ENISA threat landscape 2023. Publications Office of the European Union.
34. Manukonda, K. R. R., Swamy, H., Sankar, R., & CM, C. (2024, August). Application of Explicit Group Sparse Projection in Optimizing 5G Network Resource Allocation and Topology Design. In 2024 4th Asian Conference on Innovation in Technology (ASIANCON) (pp. 1-6). IEEE.
35. European Union Agency for Cybersecurity. (2024). ENISA threat landscape 2024. Publications Office of the European Union.
36. Cybersecurity and Infrastructure Security Agency. (2023). Shifting the balance of cybersecurity risk: Principles and approaches for security-by-design and -default. U.S. Department of Homeland Security.
37. Cybersecurity and Infrastructure Security Agency. (2023). Secure by design. U.S. Department of Homeland Security.
38. Cybersecurity and Infrastructure Security Agency. (2024). The open source software security roadmap. U.S. Department of Homeland Security.
39. Mahadevan, S., Desani, N. R., Yadav, P. S., Joseph, T., & Malcom, A. (2024). FutureTech Innovations. Cari Journals USA LLC.
40. National Institute of Standards and Technology. (2021). A zero trust architecture for the federal government. National Institute of Standards and Technology.
41. National Institute of Standards and Technology. (2023). Artificial intelligence risk management framework (AI RMF 1.0). National Institute of Standards and Technology.
42. National Institute of Standards and Technology. (2024). Artificial intelligence risk management framework: Generative artificial intelligence profile (NIST AI 600-1). National Institute of Standards and Technology.
43. Mangalampalli, B. M. Intelligent Data Profiling for Healthcare Data Lakes Using AI-Enhanced Analytics.
44. World Economic Forum. (2022). Global cybersecurity outlook 2022. World Economic Forum.
45. International Organization for Standardization. (2022). Information security, cybersecurity and privacy protection—Information security management systems—Requirements (ISO/IEC 27001:2022). ISO.
46. International Organization for Standardization. (2022). Information security, cybersecurity and privacy protection—Information security controls (ISO/IEC 27002:2022). ISO.
47. Yandamuri, U. S. (2022). Cloud-Based Data Integration Architectures for Scalable Enterprise Analytics. International Journal of Intelligent Systems and Applications in Engineering, 10, 472-483.
48. World Economic Forum. (2024). Global cybersecurity outlook 2024. World Economic Forum.
Additional Files
Published
Data Availability Statement
No datasets were generated or analyzed in this study.
Issue
Section
License
Copyright (c) 2025 Shabrinath, Luca Romano (Author)
This work is licensed under a Creative Commons Attribution 4.0 International License.
This work is licensed under a Creative Commons
Attribution 4.0 International License (CC BY 4.0).
You are free to:
- Share: copy and redistribute the material
- Adapt: remix, transform, and build upon the material
for any purpose, even commercially.
Under the following terms:
Attribution — You must give appropriate credit to
the original author(s) and source.
Full license text: https://creativecommons.org/licenses/by/4.0/
