IJOT
Vol. 7 No. 1 (2025): International Journal on Orange Technologies (IJOT)

GRC Accountability Gap in AI and Cloud Security: Limitations of Automated Compliance and Risk Control Mechanisms

Md Mofasel Hossain (Software Engineering, Noakhali Science and Technology University, Bangladesh)
Afsara Tasnim Shama (System Engineer, Department of ITSM NOC, Wipro IT Service Limited, Bangladesh)



Article Info

Publish Date
28 Jan 2025

Abstract

Background: Artificial Intelligence (AI) and cloud computing have emerged as important enablers of digital transformation by allowing organizations to increase efficiency, scalability, and cybersecurity. The reliance on automated Governance, Risk, and Compliance (GRC) has led to many accountability challenges, especially in terms of regulatory compliance, risk governance, and security decisions. Methods: A quantitative cross-sectional research design was used in this study using an online survey with 175 respondents comprising cybersecurity, AI, cloud security, and GRC professionals from the United States. Descriptive statistics, percentage analysis, correlation analysis, and regression analysis were performed in SPSS for examining the associations. Results: It was found out that the highest mean score of 4.02 is obtained for Human Oversight and Decision Making and the lowest mean score of 3.68 is obtained for Automated Compliance Effectiveness, thus stressing the role of human expertise. Governance Challenges turned out to be the most pressing issue 28.6% and Risk Control Shortcomings – the biggest contributor 18.3%. All the study variables were found to have a strong positive correlation with each other; the highest correlation was found between Risk Control Mechanisms and Organizational Security Performance r = 0.75. Further multiple regression analysis proved Risk Control Mechanisms to be the most effective predictor β = 0.28 and the suggested model to explain 68.4% of variance of organizational security performance. Conclusion: The study comes to conclusion that a combined approach involving governance, risk management and intelligent automation is required for efficient cloud security performance.

Copyrights © 2025






Journal Info

Abbrev

IJOT

Publisher

Subject

Automotive Engineering Computer Science & IT Control & Systems Engineering Engineering Industrial & Manufacturing Engineering Materials Science & Nanotechnology

Description

International Journal on Orange Technologies (IJOT) is an online international peer-reviewed journal that publishes high-quality original scientific papers, short communications, correspondence, and case studies in areas of research, development, and applications of orange technology and ...