Security Considerations in the Evaluation of Public Cloud Service Offers

This diploma thesis addresses the selection of public cloud services with a focus on security aspects. With the growing adoption of cloud computing, organizations face complex challenges in assessing risks and compliance with standards, while the process of selecting a suitable provider is often non-transparent and demanding. The aim of this thesis is therefore to design and verify a comprehensive methodology that provides organizations with a practical and structured tool for qualified evaluation and decision-making. Within the Design Science Research methodological framework, the main output of the thesis was created – a comprehensive methodology implemented as an interactive web application. Its design integrated knowledge from a systematic literature review of standards (e.g., CSA CCM), findings from a survey among IT managers, and an analysis of market practices. The survey confirmed an existing discrepancy between the perceived importance of security and actual practice, where companies often lack time, expertise, and transparent information. The proposed methodology addresses these problems by emphasizing measurable steps and verifiable evidence, such as independent audits and certifications.