Systematic Risk Assessment and Mitigation Strategies in Cloud-Based Data Storage Systems

Abstract

This study explores the risks and mitigation strategies in cloud-based data storage systems, with the aim of identifying key security threats and effective mitigation solutions for cloud service providers in Indonesia. Cloud systems, despite offering high flexibility and scalability, face significant risks such as data security threats, vulnerability to cyberattacks, and user privacy issues. A qualitative descriptive research method was used with a case study approach involving interviews and questionnaires to several cloud service provider companies. Data collection was conducted through structured interviews with information security managers and internal users, who provided data on mitigation strategies such as encryption, access protection, and 24/7 monitoring. The results showed that the main threats to cloud systems consisted of data security risks (score 4.5), cyberattacks (4.7), user privacy (4.2), and service availability (4.3). The most effective mitigation strategies were data encryption and continuous monitoring, each showing high effectiveness with an average score of 4.8 and 4.6. These findings are in line with previous studies showing that encryption and layered monitoring systems are optimal methods for maintaining data security in cloud environments. In terms of practical implications, this study provides guidance for cloud service providers to implement multifactor authentication and stronger privacy policies to mitigate risks. For future research, it is recommended that AI-based security methods and advanced authentication be further explored to add layers of protection to user data in cloud systems. These findings reinforce the need for a systematic and multi-layered security approach in cloud-based data management in the increasingly digital era.