A Conceptual Framework for Legal and Ethical Risk Modeling in Enterprise Data Protection Governance Systems

References

[1] Abdullah, H., Labuschagne, L., & Young, J. (2016, November). A conceptual framework for integrated information privacy protection. In 2016 International Conference on Advances in Computing and Communication Engineering (ICACCE) (pp. 242-248). IEEE.

[2] Adamah, M., Mangelinck-Noël, N., Kan-Dapaah, K., Ottah, D. G., Salifu, A., Dozie-Nwachukwu, S. O., ... & Azoumah, Y. (2016). A maiden edition of AUSTECH 2015 International Conference Book of Abstracts.

[3] Adeojo, O.O. and Osinibi, O.M., 2016. Assessing the intersections between renewable energy, sustainable development and the challenges of environmental justice in Nigeria. Interdisciplinary Environmental Review, 17(2), pp.149-166.

[4] Ahmed, K. S., & Odejobi, O. D. (2018). Conceptual framework for scalable and secure cloud architectures for enterprise messaging. IRE Journals, 2(1), 1–15.

[5] Ahmed, K. S., & Odejobi, O. D. (2018). Resource allocation model for energy-efficient virtual machine placement in data centers. IRE Journals, 2(3), 1–10.

[6] Akinrinoye, O. V., Umoren, O., Didi, P. U., Balogun, O., & Abass, O. S. (2015, September). Predictive and segmentation-based marketing analytics framework for optimizing customer acquisition, engagement, and retention strategies. Engineering and Technology Journal, 10(9), 6758–6776.

[7] Akpan, U. U., Adekoya, K. O., Awe, E. T., Garba, N., Oguncoker, G. D., & Ojo, S. G. (2017). Mini-STRs screening of 12 relatives of Hausa origin in northern Nigeria. Nigerian Journal of Basic and Applied Sciences, 25(1), 48-57.

[8] Aleem, A., & Ryan Sprott, C. (2012). Let me in the cloud: analysis of the benefit and risk assessment of cloud platform. Journal of Financial Crime, 20(1), 6-24.

[9] Alnemr, R., Cayirci, E., Corte, L. D., Garaga, A., Leenes, R., Mhungu, R., ... & Vranaki, A. (2015, October). A data protection impact assessment methodology for cloud. In Annual Privacy Forum (pp. 60-92). Cham: Springer International Publishing.

[10] AlZain, M. A., Pardede, E., Soh, B., & Thom, J. A. (2012, January). Cloud computing security: from single to multi-clouds. In 2012 45th Hawaii International Conference on System Sciences (pp. 5490-5499). IEEE.

[11] Anioke, S. C., & Atima, M. E. (2018). Regulatory Analytics Approaches for Improving Occupational Health Safety Outcomes Across Public and Private Workplaces.

[12] Aransi, A. N., Nwafor, M. I., Uduokhai, D. O., & Gil-Ozoudeh, I. D. S. (2018). Comparative study of traditional and contemporary architectural morphologies in Nigerian settlements. IRE Journals, 1(7), 138–152.

[13] Awe, E. T. (2017). Hybridization of snout mouth deformed and normal mouth African catfish Clarias gariepinus. Animal Research International, 14(3), 2804-2808.

[14] Awe, E. T., & Akpan, U. U. (2017). Cytological study of Allium cepa and Allium sativum.

[15] Awe, E. T., Akpan, U. U., & Adekoya, K. O. (2017). Evaluation of two MiniSTR loci mutation events in five Father-Mother-Child trios of Yoruba origin. Nigerian Journal of Biotechnology, 33, 120-124.

[16] Aye, P.A and Tawose, O.M. (2016): Physiological Responses of West African Dwarf Sheep fed Graded Levels of Gmelina arborea Leaf and Cassava Peel Concentrates under Different Management Systems. Agriculture and Biology Journal of North America, ISSN Print:2151-7517.Online:2151-7525, doi:10.5251/abjna.2016.7.4.185.195, http://www.scihub.org/ABJNA.

[17] Aye, P.A. and Tawose, O.M. (2015): Acceptability and utilization of graded levels of Gmelina arborea leaves and cassava peels concentrate by West African Dwarf Sheep. International Journal of Advances in Agriculture, Vol. 4, No. 2, Pages 415-422, DOI: 10.24297/jaa. v4i2.4272.

[18] Babu, M. S., Babu, A. M., & Sekhar, M. C. (2013). Enterprise risk management integrated framework for cloud computing. International Journal of Advanced Networking and Applications, 5(3), 1939.

[19] Badmus, O., & Olamide, A. L. (2018). Data-Driven Framework for Predicting Subsurface Contamination Pathways in Complex Remediation Projects.

[20] Baumgartner, R. J. (2014). Managing corporate sustainability and CSR: A conceptual framework combining values, strategies and instruments contributing to sustainable development. Corporate Social Responsibility and Environmental Management, 21(5), 258-271.

[21] Bukhari, T. T., Oladimeji, O. Y. E. T. U. N. J. I., Etim, E. D., & Ajayi, J. O. (2018). A conceptual framework for designing resilient multi-cloud networks ensuring security, scalability, and reliability across infrastructures. IRE Journals, 1(8), 164-173.

[22] Butler, T., & McGovern, D. (2012). A conceptual model and IS framework for the design and adoption of environmental compliance management systems: For special issue on governance, risk and compliance in IS. Information Systems Frontiers, 14(2), 221-235.

[23] Cath, C. (2018). Governing artificial intelligence: ethical, legal and technical opportunities and challenges. Philosophical Transactions of the Royal Society A: Mathematical, Physical and Engineering Sciences, 376(2133).

[24] Chang, V., & Ramachandran, M. (2015). Towards achieving data security with the cloud computing adoption framework. IEEE Transactions on services computing, 9(1), 138-151.

[25] Custers, B., Dechesne, F., Sears, A. M., Tani, T., & Van der Hof, S. (2018). A comparison of data protection legislation and policies across the EU. Computer Law & Security Review, 34(2), 234-243.

[26] Djemame, K., Armstrong, D., Guitart, J., & Macias, M. (2014). A risk assessment framework for cloud computing. IEEE Transactions on Cloud Computing, 4(3), 265-278.

[27] Efobi, O. Z., Akinleye, O. K., & Fasawe, O. (2017). Framework for Quantitative Evaluation of ESG Adoption within SME Supply Chains in Emerging Economies. measurement.

[28] Esa, M., & Ishak, S. S. M. (2018). Impact of enterprise risk management on organizational performance. Journal of Advanced Research in Dynamical and Control Systems, 10(6), 1-9.

[29] Fall, D., Okuda, T., Kadobayashi, Y., & Yamaguchi, S. (2015). Security risk quantification mechanism for infrastructure as a service cloud computing platforms. Journal of Information Processing, 23(4), 465-475.

[30] Farounbi, B. O., Akinola, A. S., Adesanya, O. S., & Okafor, C. M. (2018). Automated payroll compliance assurance: Linking withholding algorithms to financial statement reliability. IRE Journals, 1(7), 341–357.

[31] Floridi, L. (2018). Soft ethics, the governance of the digital and the General Data Protection Regulation. Philosophical Transactions of the Royal Society A: Mathematical, Physical and Engineering Sciences, 376(2133), 20180081.

[32] Foley, J. G. (2014). Sensor networks and their applications: Investigating the role of sensor web enablement (Doctoral dissertation, UCL (University College London)).

[33] Frempong, D., Ifenatuora, G. P., Olateju, M., & Ofori, S. D. Multimodal Instructional Design: Enhancing Language Learning in STEM Education through Diverse Technologies.

[34] Garrison, J., & Nova, K. (2017). Cloud native infrastructure: patterns for scalable infrastructure and applications in a dynamic environment. " O'Reilly Media, Inc.".

[35] Gholami, A., & Laure, E. (2016). Security and privacy of sensitive data in cloud computing: a survey of recent developments. arXiv preprint arXiv:1601.01498.

[36] Gil-Ozoudeh, I. D. S., Aransi, A. N., Nwafor, M. I., & Uduokhai, D. O. (2018). Socioeconomic determinants influencing the affordability and sustainability of urban housing in Nigeria. IRE Journals, 2(3), 164–169.

[37] Gil-Ozoudeh, I. D. S., Nwafor, M. I., Uduokhai, D. O., & Aransi, A. N. (2018). Impact of climatic variables on the optimization of building envelope design in humid regions. IRE Journals, 1(10), 322–335.

[38] Goettelmann, E. (2015). Risk-aware Business Process Modelling and Trusted Deployment in the Cloud (Doctoral dissertation, Université de Lorraine).

[39] Heng, S., Neitzel, S., Stobbe, A., AG, D. B., & Mayer, T. (2012). Cloud computing. Freundliche Aussichten für die Wolke, Deutsche Bank DB Research, Economics. Digitale Ökonomie und struktureller Wandel, Frankfurt am Main.

[40] Henon, A., Keane, M. M., & Adell, G. (2016). User, self-inspection, and quality checks requirements.

[41] Hon, W. K., Hörnle, J., & Millard, C. (2012). Data protection jurisdiction and cloud computing–when are cloud users and providers subject to EU data protection law? The cloud of unknowing. International Review of Law, Computers & Technology, 26(2-3), 129-164.

[42] Ibtissem, B., & Bouri, A. (2013). Credit risk management in microfinance: The conceptual framework. ACRN Journal of Finance and Risk Perspectives, 2(1), 9-24.

[43] Ike, P. N., Aifuwa, S. E., Nnabueze, S. B., Olatunde-Thorpe, J., Ogbuefi, E., Oshoba, T. O., & Akokodaripon, D. (2018). Utilizing Nanomaterials in Healthcare Supply Chain Management for Improved Drug Delivery Systems. medicine (Ding et al., 2020; Furtado et al., 2018), 12, 13.

[44] Irion, K. (2012). Government cloud computing and national data sovereignty. Policy & Internet, 4(3-4), 40-71.

[45] Jones, A., & Does, J. (2013). Enterprise.

[46] Jourdan, S., & Pomès, P. (2017). Infrastructure as Code (IAC) Cookbook. Packt Publishing Ltd.

[47] Kadenic, V. (2015). Compliance of Data Lake Enterprise Architecture Model with the General Data Protection Regulation (GDPR).

[48] Kalloniatis, C., Mouratidis, H., Vassilis, M., Islam, S., Gritzalis, S., & Kavakli, E. (2014). Towards the design of secure and privacy-oriented information systems in the cloud: Identifying the major concepts. Computer Standards & Interfaces, 36(4), 759-775.

[49] Kantsev, V. (2017). Implementing devops on AWS. Packt Publishing Ltd.

[50] King, N. J., & Raja, V. (2012). Protecting the privacy and security of sensitive customer data in the cloud. Computer Law & Security Review, 28(3), 308-319.

[51] Krebs, D. (2012). Regulating the cloud: a comparative analysis of the current and proposed privacy frameworks in Canada and the European Union. Canadian Journal of Law and Technology, 10(1), 2. Currie, W., & Seddon, J. (2014). A cross-country study of cloud computing policy and regulation in healthcare.

[52] Kuschewsky, M. (2012). Data protection & privacy: jurisdictional comparisons. Sweet & Maxwell.

[53] Kyere Yeboah, B., & Enow, O. F. (2018). Conceptual framework for reliability-centered maintenance programs in electricity distribution utilities. Iconic Research and Engineering Journals, 2(3), 140–153.

[54] Laszewski, T., Arora, K., Farr, E., & Zonooz, P. (2018). Cloud Native Architectures: Design high-availability and cost-effective applications for the cloud. Packt Publishing Ltd.

[55] Latif, R., Abbas, H., Assar, S., & Ali, Q. (2014). Cloud computing risk assessment: a systematic literature review. Future information technology, 285-295.

[56] Lawal, O. A., & Oduleye, T. E. (2018). A conceptual model for financial analytics-driven enterprise value creation in technology firms. IRE Journals, 2(2), 174.

[57] Lawal, O. A., & Oduleye, T. E. (2018). A review and conceptual framework for tax governance and cross-border compliance analytics. IRE Journals, 2(5), 336.

[58] Li, Y., Gai, K., Ming, Z., Zhao, H., & Qiu, M. (2016). Intercrossed access controls for secure financial services on multimedia big data in cloud systems. ACM Transactions on Multimedia Computing, Communications, and Applications (TOMM), 12(4s), 1-18.

[59] McCarthy, V., & Plummer, J. (2016). Management information systems and the protection of private information: An ethical framework for decision makers in organizations. Journal of Information Systems Technology & Planning, 8(19), 128-136.

[60] Morris, K. (2016). Infrastructure as code: managing servers in the cloud. " O'Reilly Media, Inc.".

[61] Mpeera Ntayi, J., Ngoboka, P., Mutebi, H., & Sitenda, G. (2012). Social value orientation and regulatory compliance in Ugandan public procurement. International Journal of Social Economics, 39(11), 900-920.

[62] Nwafor, M. I., Giloid, S., Uduokhai, D. O., & Aransi, A. N. (2018). Socioeconomic determinants influencing the affordability and sustainability of urban housing in Nigeria. Iconic Research and Engineering Journals, 2(3), 154–169.

[63] Nwafor, M. I., Uduokhai, D. O., Giloid, S., & Aransi, A. N. (2018). Comparative study of traditional and contemporary architectural morphologies in Nigerian settlements. Iconic Research and Engineering Journals, 1(7), 138–152.

[64] Nwafor, M. I., Uduokhai, D. O., Giloid, S., & Aransi, A. N. (2018). Impact of climatic variables on the optimization of building envelope design in humid regions. Iconic Research and Engineering Journals, 1(10), 322–335.

[65] Odejobi, O. D., & Ahmed, K. S. (2018). Performance evaluation model for multi-tenant Microsoft 365 deployments under high concurrency. IRE Journals, 1(11), 92–107.

[66] Odejobi, O. D., & Ahmed, K. S. (2018). Statistical model for estimating daily solar radiation for renewable energy planning. IRE Journals, 2(5), 1–12.

[67] Olamide, A. L., & Badmus, O. (2018). Spatially Explicit Risk Modeling Framework for Tracking Subsurface Contaminant Migration in Data-Limited Remediation Sites.

[68] Omopariola, M. (2017). AI-Enhanced Threat Detection for National-Scale Cloud Networks: Frameworks, Applications, and Case Studies. ResearchGate Preprint.

[69] Oni, O., Adeshina, Y. T., Iloeje, K. F., & Olatunji, O. O. (2018). Artificial Intelligence Model Fairness Auditor For Loan Systems. Journal ID, 8993, 1162.

[70] Onovo, A. A., Nta, I. E., Onah, A. A., Okolo, C. A., Aliyu, A., Dakum, P., ... & Gado, P. (2015). Partner HIV serostatus disclosure and determinants of serodiscordance among prevention of mother to child transmission clients in Nigeria. BMC public health, 15(1), 827.

[71] Onovo, A., Gado, P., & Atobatele, A. (2012). HIV/AIDS Prevalence Among Pregnant Women Attending Pmtct Services In Cross River State, Nigeria.

[72] Osabuohien, F. O. (2017). Review of the environmental impact of polymer degradation. Communication in Physical Sciences, 2(1).

[73] Osanaiye, O., Choo, K. K. R., & Dlodlo, M. (2016). Distributed denial of service (DDoS) resilience in cloud: Review and conceptual cloud DDoS mitigation framework. Journal of Network and Computer Applications, 67, 147-165.

[74] Page, D., & Crawley, W. (2016). Report: Seminar on Governance and Media Reform in Sri Lanka and the Commonwealth.

[75] Perry, P., & Towers, N. (2013). Conceptual framework development: CSR implementation in fashion supply chains. International Journal of Physical Distribution & Logistics Management, 43(5-6), 478-501.

[76] Pfarr, F., Buckel, T., & Winkelmann, A. (2014, January). Cloud Computing Data Protection--A Literature Review and Analysis. In 2014 47th Hawaii International Conference on System Sciences (pp. 5018-5027). IEEE.

[77] Puaschunder, J. M. (Ed.). (2018). Corporate social responsibility and opportunities for sustainable financial success. IGI Global.

[78] Raina, R. (2016). A systems perspective on cybersecurity in the cloud: frameworks, metrics and migration strategy (Doctoral dissertation, Massachusetts Institute of Technology).

[79] Ramachandran, M., & Chang, V. (2016). Towards performance evaluation of cloud service providers for cloud data security. International Journal of Information Management, 36(4), 618-625.

[80] Runiassy, M. (2016). Modeling cloud-computing threats and vulnerabilities. San José State University.

[81] Seddon, J. J., & Currie, W. L. (2013). Cloud computing and trans-border health data: Unpacking US and EU healthcare regulation and compliance. Health policy and technology, 2(4), 229-241.

[82] Seittenranta, R. (2018). Modernizing Proprietary E-commerce Platform Infrastructure.

[83] Seyi-Lande, O. B., Arowogbadamu, A. A. G., & Oziri, S. T. (2018). A comprehensive framework for high-value analytical integration to optimize network resource allocation and strategic growth. Iconic Research and Engineering Journals, 1(11), 76-91.

[84] Seyi-Lande, O. B., Oziri, S. T., & Arowogbadamu, A. A. G. (2018). Leveraging business intelligence as a catalyst for strategic decision-making in emerging telecommunications markets. Iconic Research and Engineering Journals, 2(3), 92-105.

[85] Stahl, G. K., & Sully de Luque, M. (2014). Antecedents of responsible leader behavior: A research synthesis, conceptual framework, and agenda for future research. Academy of Management Perspectives, 28(3), 235-254.

[86] Thota, M. R. (2016). Resilient Data Engineering: The Evolution of Database and Big Data Administration in Cloud-Native Platforms. European Journal of Advances in Engineering and Technology, 3(12), 63-69.

[87] Thota, M. R. (2017). End-to-End Infrastructure Automation: Leveraging Terraform and Ansible for Intelligent Database and Big Data Orchestration. Journal of Scientific and Engineering Research, 4(5), 308-316.

[88] Thota, M. R. (2017). From data centers to cloud platforms: A scalable framework for database and big data migration. Journal of Scientific and Engineering Research.

[89] Thota, M. R. (2018). Strategic Modernization of Cloud Databases with Enhanced Resilience and Security Controls. Journal of Scientific and Engineering Research, 5(3), 532-546.

[90] Tian, G. Y. (2016). Current issues of cross-border personal data protection in the context of cloud computing and trans-Pacific partnership agreement: join or withdraw. Wis. Int'l LJ, 34, 367.

[91] Tupa, J., Simota, J., & Steiner, F. (2017). Aspects of risk management implementation for Industry 4.0. Procedia manufacturing, 11, 1223-1230.

[92] Ugwu-Oju, U. M., Okeke, O. T., & Nwankwo, C. O. (2018). Advances in cybersecurity protection for sensitive business digital infrastructure. IRE Journals, 1(11), 127–135. 3.

[93] Ugwu-Oju, U. M., Okeke, O. T., & Nwankwo, C. O. (2018). Conceptual model improving encryption strategies for organizational information protection. IRE Journals, 2(2), 139–147.

[94] Ugwu-Oju, U. M., Okeke, O. T., & Nwankwo, C. O. (2018). Conceptual model improving digital workflows within organizational information technology operations. IRE Journals, 2(5), 294–302.

[95] Ugwu-Oju, U. M., Okeke, O. T., & Nwankwo, C. O. (2018). Review of network protocol stability techniques for enterprise information systems. IRE Journals, 1, 196–204.

[96] Uzondu, F. N., & Ofoedu, A. T. (2014). Modeling Of Asphaltic Sludge Generation from Spent Engine Oil.

[97] Uzondu, F. N., & Ofoedu, A. T. (2011). Feasibility of spent engine oil and charcoal as raw materials for the production of black printing ink.

[98] Vicente, P., & Mira da Silva, M. (2011, June). A conceptual model for integrated governance, risk and compliance. In International Conference on Advanced Information Systems Engineering (pp. 199-213). Berlin, Heidelberg: Springer Berlin Heidelberg.

[99] Vu, P. L. (2016). Floating architecture: Hawaii's response to sea level rise. University of Hawai'i at Manoa.

[100] Yeboah, B. K., & Enow, O. F. (2018, September 30). Conceptual framework for reliability-centered maintenance programs in electricity distribution utilities. Iconic Research and Engineering Journals, 2(3), 140–153.

[101] Yetunde, R. O., Onyelucheya, O. P., & Dako, O. F. (2018). Integrating Financial Reporting Standards into Agricultural Extension Enterprises: A Case for Sustainable Rural Finance Systems.

[102] Zylstra, B., Netscher, G., Jacquemot, J., Schaffer, M., Shen, G., Bowhay, A. D., ... & Schenk, A. K. (2018). Extended, continuous measures of functional status in community dwelling persons with Alzheimer’s and related dementia: Infrastructure, performance, tradeoffs, preliminary data, and promise. Journal of neuroscience methods, 300, 59-67.

@article{1714911,
      author = {Ijeoma Stephanie Mbonu, Chime Aliliele, Uzoamaka Iwuanyanwu, Oluchukwu Modesta Oluoha},
      title = {A Conceptual Framework for Legal and Ethical Risk Modeling in Enterprise Data Protection Governance Systems},
      journal = {Iconic Research And Engineering Journals},
      year = {2018},
      volume = {2},
      number = {2},
      pages = {207-226},
      issn = {2456-8880},
      url = {https://www.irejournals.com/formatedpaper/1714911.pdf},
      abstract = {Enterprise data protection governance has become a strategic imperative as organizations operate within complex regulatory environments, expanding digital ecosystems, and escalating cyber threats. However, existing governance models often treat legal compliance, ethical responsibility, and technical risk management as fragmented domains, limiting the effectiveness of enterprise-wide protection strategies. This study proposes a conceptual framework for legal and ethical risk modeling in enterprise data protection governance systems that integrates regulatory obligations, organizational ethics, and operational risk analytics into a unified governance architecture. The framework is grounded in principles of privacy-by-design, accountability, proportionality, and transparency, and it maps the relationships between legal mandates, stakeholder expectations, and technological safeguards. It introduces a multi-layered modeling approach consisting of regulatory interpretation, ethical impact assessment, risk quantification, governance decision alignment, and continuous monitoring. By aligning compliance requirements with ethical reasoning and measurable risk indicators, the model aims to strengthen proactive decision-making and improve organizational resilience. The framework also emphasizes cross-functional collaboration among legal, compliance, cybersecurity, data governance, and executive leadership teams. Scenario-based risk mapping and governance dashboards are proposed to support prioritization, accountability, and traceable policy enforcement. This research contributes to theory by bridging gaps between legal scholarship, ethics, and information security governance, and to practice by offering a scalable structure adaptable to diverse regulatory regimes and organizational contexts. The proposed framework provides a foundation for future empirical validation and supports the development of intelligent governance tools capable of anticipating emerging legal and ethical risks in data-driven enterprises. Furthermore, the framework incorporates lifecycle-based controls covering data collection, processing, sharing, retention, and deletion, ensuring consistent oversight across the information value chain. Stakeholder trust, reputational risk, and social responsibility metrics are embedded alongside traditional financial and operational indicators. The model highlights governance maturity stages that guide organizations from reactive compliance toward predictive, ethics-centered risk governance. It supports policy harmonization, audit readiness, and explainable decision processes for regulators and stakeholders. Ultimately, the framework encourages organizations to embed ethical foresight into strategic planning, enabling sustainable innovation while safeguarding individual rights and societal expectations. It provides practical guidance for aligning governance investments with long-term resilience, compliance efficiency, and responsible digital transformation outcomes.},
      keywords = {Enterprise Data Protection, Legal Risk Modeling, Ethical Governance, Privacy-By-Design, Regulatory Compliance, Cybersecurity Governance, Risk Analytics, Data Governance Maturity},
      month = {August},
      doi = {https://doi.org/10.64388/IREV2I2-1714911}
  }