November 09
Survey
About ENISA
The European Network and Information Security Agency (ENISA) is an EU agency created to advance
the functioning of the internal market. ENISA is a centre of excellence for the European Member States
and European institutions in network and information security, giving advice and recommendations
and acting as a switchboard of information for good practices. Moreover, the agency facilitates
contacts between the European institutions, the Member States and private business and industry
actors.
Contact details
Internet: http://www.enisa.europa.eu/
An SME perspective on Cloud Computing
3
Survey
Background
ENISA (the European Network and Information Security Agency) has conducted a security risk
assessment of cloud computing technologies aimed at giving advice to (among others) SME's on the
most important risks in adopting cloud computing technologies, as well as ways to address those risks.
As part of this study, we have launched a survey of the actual needs, requirements and expectations of
SMEs for cloud computing services.
The results of the survey were used to support the creation of a use case scenario: “An SME
perspective on Cloud Computing”.
The results the analysis can be found in the report: “Cloud computing Risk Assessment: Benefits, risks
and recommendations for information security”.
Here you can find the raw data from the survey
4 An SME perspective on Cloud Computing
Survey
Contents
About ENISA ........................................................................................................................................... 2
Contact details........................................................................................................................................ 2
Background ................................................................................................................................................ 3
Questionnaire ............................................................................................................................................ 5
Survey
Questionnaire
The survey “An SME perspective on cloud computing” was launched the 16th of April 2009 through the
on line survey service Survey Monkey. The survey is still available at this link:
http://www.surveymonkey.com/s.aspx?sm=CZdVubBa9LIzYlR3KNeZIQ_3d_3d, and ENISA will keep on
collecting data until June 2010.
the type (SaaS, PaaS, etc) of cloud service an SME will likely use
Survey
Response Response
Answer Options
Percent Count
1-9 Employees 36,5% 27
10-50 Employees 16,2% 12
50-250 Employees 18,9% 14
Over 250 Employees 28,4% 21
answered question 74
An SME perspective on Cloud Computing
7
Survey
Response
Country AT BE CY CZ DK FR DE IE IT LU NL SI ES SE CH UK
Count
2 2 2 1 2 3 5 5 6 1 5 2 9 1 2 15 63
Drivers - Question 3
What are the reasons behind your possible engagement in the Cloud Computing area?
Response Response
Answer Options
Percent Count
Remove economic/expertise barriers impeding to modernize
business processes by the introduction of Information Technology 30,6% 22
Survey
Survey
Which solution do you see as the most suitable for an SME, according to this
possible Cloud Computing taxonomy?
Response Response
Answer Options
Percent Count
Public Cloud (owned and managed by an unrelated business) 24,7% 18
Private Cloud (owned and managed internally) 15,1% 11
Partner Cloud (owned and managed by a trusted partner) 27,4% 20
A federation of clouds provided by various sources (partner,
31,5% 23
private, etc).
Other 1,4% 1
answered question 73
skipped question 1
10 An SME perspective on Cloud Computing
Survey
Survey
Response
Answer Options Response Count
Percent
YES 73,6% 53
NO 26,4% 19
Other (please specify) 3
answered question 72
skipped question 2
Survey
Response Response
Answer Options
Percent Count
Fully outsourced disaster recovery and business continuity 48,6% 35
A contingency plan based on internal resources (i.e.
leveraging services/platform/infrastructure already in use 63,9% 46
‘before the Cloud’)
Other (please specify) 1,4% 1
answered question 72
skipped question 2
Survey
Survey
An SME perspective on Cloud Computing
15
Survey
Privacy 0 7 28 31 3,36 66
Availability of services and/or 3 9 28 26 3,17 66
data
Integrity of services and/or 0 9 28 27 3,28 64
data
Confidentiality of corporate data 1 3 17 43 3,59 64
Repudiation 1 24 25 7 2,67 57
Loss of control of services 2 14 29 17 2,98 62
and/or data
Lack of liability of providers in 1 15 25 19 3,03 60
case of security incidents
Inconsistency between trans 8 25 15 12 2,52 60
national laws and regulations
Unclear scheme in the pay per 10 26 14 9 2,37 59
use approach
Uncontrolled variable cost 4 21 26 7 2,62 58
Cost and difficulty of migration 7 31 14 6 2,33 58
to the cloud (legacy software
etc...)
Intra-clouds (vendor lock-in) 5 21 20 10 2,63 56
migration
Other (please specify) 3
answered question 73
skipped question 1
16 An SME perspective on Cloud Computing
Survey