Copyright © 2026 Authors retain the copyright of this article. This article is an open access article distributed under the Creative Commons Attribution License which permits unrestricted use, distribution, and reproduction in any medium, provided the original work is properly cited.

@article{170269,
        author = {Ifeanyi Amuche Ilochonwu},
        title = {Information Technology Governance in Cloud Computing: A Framework of Risk Management and Compliance},
        journal = {International Journal of Innovative Research in Technology},
        year = {2024},
        volume = {11},
        number = {7},
        pages = {591-602},
        issn = {2349-6002},
        url = {https://ijirt.org/article?manuscript=170269},
        abstract = {Despite the amazing benefits cloud computing has brought organizations, it comes at the cost of new challenges. Cloud computing has changed the way organizations manage their technology. However, with these changes come challenges such as cloud governance and compliance because of the multitenancy, cross-border data flows, and changing regulations that come with a cloud environment. This paper evaluates current IT governance frameworks like COBIT, ITIL, and ISO/IEC 27001/2. Then, highlight the gaps in these frameworks that don’t address cloud-specific risks. To address these cloud-specific risks, there is a need for new governance frameworks that improve the risk management and compliance of cloud environments. A new framework was proposed after thoroughly reviewing existing models and methodologies like STRIDE, GDPR, and ITIL. This proposed framework integrates AI and machine learning to detect threats and manage risks in real-time. Unifying fragmented governance approaches offers a scalable and flexible solution capable of adapting to different cloud setups. Beyond the already numerous advantages of this new framework, it also provides a practical means for Organizations with complex regulations across multiple regions to better comply with international standards. This framework provides an effective, clear, and structured way for organizations to manage their security and compliance in the cloud.},
        keywords = {IT governance, cloud computing, risk management, compliance, cybersecurity},
        month = {December},
        }