Information Security in the Cloud: A Systematic Review

Abstract

In a context of increasing adoption of cloud technologies, information security has become a critical issue. This article focuses on identifying, analyzing and addressing information security challenges in cloud environments, while highlighting recommended best practices to ensure data integrity, confidentiality and availability. Using the PRISMA methodology, we seek to answer What are the challenges and best practices of information security in cloud environments? From this base, key challenges are explored, including the secure storage of confidential information and the protection of data privacy. The importance of complying with data protection regulations and laws, such as GDPR (General Data Protection Regulation), is highlighted, especially in a cloud environment operating in different geographic locations. To address these challenges, essential best practices are presented. Encryption is highlighted as a key measure to ensure data confidentiality, while role-based access control is mentioned as a key strategy for managing who has access to information in the cloud. In addition, the need for ongoing risk assessments and a robust incident response plan to effectively protect information in increasingly vulnerable digital environments is emphasized.