Development and Evaluation of a Cloud Security Framework for Kenyan FinTechs

Abstract

Validating a security measurement framework tailored for Kenyan FinTechs operating in cloud environments. The research objectives were to create a hands-on security measurement framework index combining essential security parameters for cloud security operations and to validate the frameworks usefulness for FinTechs in Kenya. Using the Goal-Question-Metric (GQM) methodology, the study developed a framework that integrates security metrics and sub-metrics to assess cloud security performance. The framework was validated against international standards such as COBIT, ITIL, and ISO, and its effectiveness was tested through experimental analysis and questionnaire-based data collection. The target population consisted of all 51 FinTech companies in Kenya registered with the Central Bank of Kenya as of 2024. The results demonstrated that the framework successfully addressed key cloud security challenges, including internal threats, data destruction, and regulatory compliance. The study concludes that the framework provides a practical tool for FinTechs to measure and improve their cloud security performance, ensuring alignment with global standards and local regulatory requirements. Recommendations include the implementation of the framework, continuous monitoring, and collaboration with cloud service providers to enhance security.