Cloud-Based Identity and Access Management for Strengthening Enterprise Cyber Resilience in Saudi Arabia

References

[1] Ahmad W, Rasool A, Javed AR, Baker T, Jalil Z. Cyber security in IoT-based cloud computing: A comprehensive survey. Electronics. 2022;11(1):16. https://doi.org/10.3390/electronics11010016

[2] Saeed S, Altamimi SA, Alkayyal NA, Alshehri E, Alabbad DA. Digital transformation and cybersecurity challenges for businesses resilience: Issues and recommendations. Sensors. 2023;23(15):6666. https://doi.org/10.3390/s23156666

[3] Mostafa AM, Rushdy E, Medhat R, Hanafy A. An identity management scheme for cloud computing: Review, challenges, and future directions. Journal of Intelligent & Fuzzy Systems. 2023;45(6):11295–11317. https://doi.org/10.3233/JIFS-231911

[4] Alsirhani A, Ezz M, Mostafa AM. Advanced authentication mechanisms for identity and access management in cloud computing. Computer Systems Science & Engineering. 2022;43(3):967–984. https://doi.org/10.32604/csse.2022.024854

[5] Abdullayeva F. Cyber resilience and cyber security issues of intelligent cloud computing systems. Results in Control and Optimization. 2023;12:100268. https://doi.org/10.1016/j.rico.2023.100268

[6] Ferretti L, Magnanini F, Andreolini M, Colajanni M. Survivable zero trust for cloud computing environments. Computers & Security. 2021;110:102419. https://doi.org/10.1016/j.cose.2021.102419

[7] Buck C, Olenberger C, Schweizer A, Völter F, Eymann T. Never trust, always verify: A multivocal literature review on current knowledge and research gaps of zero-trust. Computers & Security. 2021;110:102436. https://doi.org/10.1016/j.cose.2021.102436

[8] Adahman Z, Malik AW, Anwar Z. An analysis of zero-trust architecture and its cost-effectiveness for organizational security. Computers & Security. 2022;122:102911. https://doi.org/10.1016/j.cose.2022.102911

[9] Syed NF, Shah SW, Shaghaghi A, Anwar A, Baig Z, Doss R. Zero Trust Architecture (ZTA): A comprehensive survey. IEEE Access. 2022;10:57143–57179. https://doi.org/10.1109/ACCESS.2022.3174679

[10] Xiao S, Ye Y, Kanwal N, Newe T, Lee B. SoK: Context and risk aware access control for zero trust systems. Security and Communication Networks. 2022;2022:7026779. https://doi.org/10.1155/2022/7026779

[11] He Y, Huang D, Chen L, Ni Y, Ma X. A survey on zero trust architecture: Challenges and future trends. Wireless Communications and Mobile Computing. 2022;2022:6476274. https://doi.org/10.1155/2022/6476274

[12] Itodo C, Ozer M. Multivocal literature review on zero-trust security implementation. Computers & Security. 2024;141:103827. https://doi.org/10.1016/j.cose.2024.103827

[13] Said W, Mostafa E, Hassan MM, Mostafa AM. A multi-factor authentication-based framework for identity management in cloud applications. Computers, Materials & Continua. 2022;71(2):3193–3209. https://doi.org/10.32604/cmc.2022.023554

[14] Otta SP, Panda S, Gupta M, Hota C. A systematic survey of multi-factor authentication for cloud infrastructure. Future Internet. 2023;15(4):146. https://doi.org/10.3390/fi15040146

[15] He H, Zheng LH, Li P, Deng L, Huang L, Chen X. An efficient attribute-based hierarchical data access control scheme in cloud computing. Human-centric Computing and Information Sciences. 2020;10:49. https://doi.org/10.1186/s13673-020-00255-5

[16] Arshad H, Johansen C, Owe O. Semantic attribute-based access control: A review on current status and future perspectives. Journal of Systems Architecture. 2022;129:102625. https://doi.org/10.1016/j.sysarc.2022.102625

[17] Wu Q, Li L, Zhang L, Mu Y, Rezaeibagha F. Secure and efficient general circuits attribute-based access control in cloud computing. IEEE Systems Journal. 2022;16(4):5533–5543. https://doi.org/10.1109/JSYST.2022.3144730

[18] Chen E, Zhu Y, Liang K, Yin H. Secure remote cloud file sharing with attribute-based access control and performance optimization. IEEE Transactions on Cloud Computing. 2023;11(1):579–594. https://doi.org/10.1109/TCC.2021.3104323

[19] Yan L, Ge L, Wang Z, Zhang G, Xu J, Hu Z. Access control scheme based on blockchain and attribute-based searchable encryption in cloud environment. Journal of Cloud Computing. 2023;12:61. https://doi.org/10.1186/s13677-023-00444-4

[20] Di Francesco Maesa D, Lisi A, Mori P, Ricci L, Boschi G. Self sovereign and blockchain based access control: Supporting attributes privacy with zero knowledge. Journal of Network and Computer Applications. 2023;212:103577. https://doi.org/10.1016/j.jnca.2022.103577

[21] Jalili V, Afgan E, Taylor J, Goecks J. Cloud bursting galaxy: Federated identity and access management. Bioinformatics. 2020;36(1):1–9. https://doi.org/10.1093/bioinformatics/btz472

[22] Mikhaeil CA, James TL. Examining the case of French hesitancy toward IDaaS solutions: Technical and social contextual factors of the organizational IDaaS privacy calculus. Information & Management. 2023;60(4):103779. https://doi.org/10.1016/j.im.2023.103779

[23] Wang R, Li C, Zhang K, Tu B. Zero-trust based dynamic access control for cloud computing. Cybersecurity. 2025;8:12. https://doi.org/10.1186/s42400-024-00320-x

[24] Shen Q, Shen Y. Endpoint security reinforcement via integrated zero-trust systems: A collaborative approach. Computers & Security. 2024;136:103537. https://doi.org/10.1016/j.cose.2023.103537

[25] Schardong F, Custódio R. Self-sovereign identity: A systematic review, mapping and taxonomy. Sensors. 2022;22(15):5641. https://doi.org/10.3390/s22155641

[26] Azad MA, Abdullah S, Arshad J, Lallie HS, Ahmed YH. Verify and trust: A multidimensional survey of zero-trust security in the age of IoT. Internet of Things. 2024;27:101227. https://doi.org/10.1016/j.iot.2024.101227

[27] Fernandez EB, Brazhuk A. A critical analysis of Zero Trust Architecture (ZTA). Computer Standards & Interfaces. 2024;89:103832. https://doi.org/10.1016/j.csi.2024.103832

[28] Aljumah A, Ahanger TA. Cyber security threats, challenges and defence mechanisms in cloud computing. IET Communications. 2020;14(7):1185–1191. https://doi.org/10.1049/iet-com.2019.0040

[29] Aldahwan NS, Ramzan MS. Factors affecting the organizational adoption of secure community cloud in KSA. Security and Communication Networks. 2021;2021:8134739. https://doi.org/10.1155/2021/8134739

[30] Al-Hawamleh AM. Investigating the multifaceted dynamics of cybersecurity practices and their impact on the quality of e-government services: Evidence from the KSA. Digital Policy, Regulation and Governance. 2024;26(3):317–336. https://doi.org/10.1108/DPRG-11-2023-0168

@article{1723948,
      author = {Yahya Khalil},
      title = {Cloud-Based Identity and Access Management for Strengthening Enterprise Cyber Resilience in Saudi Arabia},
      journal = {Iconic Research And Engineering Journals},
      year = {2026},
      volume = {10},
      number = {4},
      pages = {1627-1640},
      issn = {2456-8880},
      url = {https://www.irejournals.com/formatedpaper/1723948.pdf},
      abstract = {Saudi companies are transferring their applications, data, collaboration platforms, and key business processes into public, private, and hybrid cloud environments. While this shift enhances scalability and service agility, it also undermines the assumption that users, devices, and workloads can be trusted since they come from an internal network. As a result, identity and access management now serves as a means of achieving cyber resilience rather than remaining just an administrative task. This report brings together research that was published between 2020 and 2025 on cloud identity management, multifactor authentication, federated identity, attribute-based authorization, zero-trust access, identity-as-a-service, continuous monitoring, and resilient cloud security. Its objective is to examine how identity-focused controls can help reduce unauthorized access, restrict lateral movement, ensure service continuity, and speed up recovery in Saudi enterprise settings that are in line with Vision 2030. In order to achieve this, a structured integrative review was carried out, selecting thirty publications verified by DOI and directly relevant to the subject, with clear methodological standards and practical applicability to distributed enterprise systems. The synthesis indicates that resilient IAM relies on six interdependent capabilities: authoritative management of the identity lifecycle, phishing-resistant authentication, context-aware authorization, disciplined handling of privileged access, continuous telemetry, and automated revocation and recovery. Protection provided by isolated controls is very limited if problems such as entitlement drift, weaknesses in federation, compromised end points, or out-of-date credentials are not dealt with. The paper puts forward an identity-centric cloud cyber-resilience framework which connects preventive access decisions with detection, response, recovery, and governance. For Saudi enterprises, the main consequence is that cloud IAM should be treated as a continuously assured control plane that links security architecture, regulatory compliance, workforce practices, and operational resilience rather than being viewed merely as a login service.},
      month = {October},
  }