<!DOCTYPE article PUBLIC "-//NLM//DTD JATS (Z39.96) Journal Archiving and Interchange DTD v1.0 20120330//EN" "JATS-archivearticle1.dtd">
<article xmlns:xlink="http://www.w3.org/1999/xlink">
  <front>
    <journal-meta />
    <article-meta>
      <title-group>
        <article-title>Identifying contributions for the evaluation of cloud services in state entities</article-title>
      </title-group>
      <contrib-group>
        <contrib contrib-type="author">
          <string-name>John Jairo Ruiz</string-name>
          <email>jj.ruiz11@uniandes.edu.co</email>
          <xref ref-type="aff" rid="aff0">0</xref>
        </contrib>
        <contrib contrib-type="author">
          <string-name>Oscar Avila</string-name>
          <email>oj.avila@uniandes.edu.co</email>
          <xref ref-type="aff" rid="aff0">0</xref>
        </contrib>
        <aff id="aff0">
          <label>0</label>
          <institution>Department of Systems and Computing Engineering, School of Engineering, Universidad de los Andes, K 1E 19A 40 Bogota</institution>
          ,
          <country country="CO">Colombia</country>
        </aff>
      </contrib-group>
      <abstract>
        <p>Cloud computing is becoming an important tool that is offering multiple opportunities to state entities. However, this paradigm can also impose constraints and increase risk to this kind of institutions. For this reason, it is necessary for the entities in the state sector to assess cloud services before making the decision of adopting them. In this context, this work presents a review to identify what are the main contributions made in the research literature to carry out such assessment. The objective is to provide and overview of this research area and help practitioners to implement new guidelines to evaluate cloud services and make the best decisions when adopting them.</p>
      </abstract>
      <kwd-group>
        <kwd>adopting</kwd>
        <kwd>contracting</kwd>
        <kwd>evaluation</kwd>
        <kwd>IaaS</kwd>
        <kwd>PaaS</kwd>
        <kwd>SaaS</kwd>
        <kwd>public sector</kwd>
      </kwd-group>
    </article-meta>
  </front>
  <body>
    <sec id="sec-1">
      <title>1 Introduction</title>
      <p>
        Cloud computing is becoming an important tool capable of providing multiple
nancial, social and technological opportunities to institutions in all industrial
sectors [
        <xref ref-type="bibr" rid="ref1 ref2">1, 2</xref>
        ]. An example of these opportunities is the possibility of reducing the
operating costs of IT areas. However, cloud computing can also increase risk and
impose new constraints. On the one hand, risks are commonly associated with
security and dependency on cloud suppliers [
        <xref ref-type="bibr" rid="ref3">3</xref>
        ]. On the other hand, one of the
most important constraints stated by IT managers is that there is no guarantee
by the cloud supplier on the location of the IT resources and capabilities which
creates a sense of loss of physical control on the information [
        <xref ref-type="bibr" rid="ref4">4</xref>
        ].
      </p>
      <p>
        The state sector is not indi erent to the use of cloud computing. Public
entities are using this sourcing model in order to provide IT services and capabilities
to internal stakeholder (e.g. public employees) and external bene ciaries (private
companies, citizens, etc). For example, in most of the public entities of
Washington D.C., employees have unlimited access to a corporate document storage
service and email service contracted to cloud suppliers. In the same way, the
US General Services Administration made in 2009 the transition of the o cial
government portal (usa.gov), that provides services and information to citizens,
to the cloud. Thus, as in other sectors, cloud computing is o ering opportunities
to state entities such as the possibility of contracting IT capabilities to cloud
suppliers, such as hosting services, instead of acquiring and operating their own
infrastructure, which allows state entities to focus on their core activities.
However, cloud computing can also impose constraints to these kind of entities such
as the risk that cloud providers store con dential information outside the legal
and territorial jurisdiction of the state [
        <xref ref-type="bibr" rid="ref5">5</xref>
        ].
      </p>
      <p>
        Therefore, it is important for state entities to assess the advantages and
limitations of contracting and adopting cloud services before making a decision.
However, in several cases, these entities do not carry out a formal analysis
because of the lack of conceptual tools and knowledge on the aspects that need to
be evaluated during the former stages of the implementation of new IT services
[
        <xref ref-type="bibr" rid="ref5">5</xref>
        ]. In this context, state entities need tools including relevant evaluation aspects
to considerate and assess the possibility of adopting cloud services.
      </p>
      <p>Considering the necessity above mentioned, this research presents a literature
review to identify and analyse research contributions to assess the feasibility of
adopting cloud services. The main objective of this review is to provide an
updated overview of the main existing works to assess the convenience of making
such adoption. Other objectives of the review are: rst, it aims at helping
practitioners in the IT areas of state entities to make the best decisions by giving
them the key evaluation elements to assess cloud services. Second, this review
will ease researchers search for relevant studies in the area and help them to
constitute a base for further research. Last, structuring the literature in a detailed
and systematic manner also clari es which issues are not well covered.</p>
      <p>This work is organised as follows: Section two describes the review method
and the application of its three rst steps (planning, conducting and
summarising). Section three presents the application of the last step of the method which
consists in a synthesis for each one of the evaluation categories used. Finally,
Section four presents the nal conclusion and discussion.</p>
    </sec>
    <sec id="sec-2">
      <title>2 Study method and description of selected works</title>
      <p>
        The literature review process includes the following steps: (i) planning, (ii)
conducting and material collection, (iii) summarising, and (iv) reporting [
        <xref ref-type="bibr" rid="ref7 ref8">7, 8</xref>
        ].
(i) Planning. It consists in the de nition of the criteria to conduct the search
and validate the selected works. It aims at identifying the relevant contributions
in the research eld.
(ii) Conducting and Material Collection. This step is related to perform an
exhaustive search for primary approaches by using the criteria previously de ned.
It also validates and assesses the found approaches with respect to the research
questions. The goal of this step is to select a nal set of works.
(iii) Summarising. It is to extract the relevant information for each selected
work and describe a summary of them with the aim of answering the research
questions.
(iv) Reporting phase. This step presents a synthesis of the answers for each
research question, besides a material analysis and interpretation is also presented.
      </p>
      <sec id="sec-2-1">
        <title>2.1 Planning</title>
        <p>The review is aimed at nding out the main assessing elements used in the
literature to evaluate the convenience and viability of adopting cloud services in
order to help the IT areas of state sector institutions to implement new
guidelines and make decisions to adopt cloud services. To perform this analysis, three
evaluation categories are de ned: (i) context to analyse the domain in which the
reviewed works were originally intended to, as well as their goal and scope; (ii)
assessment aspects which is associated to the identi cation of aspects proposed
to assess the adoption of cloud services; (iii) assessment method which analyse
the procedures used in the reviewed works to guide the proposition of assessment
aspects as well as their application to speci c contexts. Every category includes
evaluation criteria that in turn have related questions to analyse the
contribution of each work to the criteria. The elements previously described are shown
in Table 1.</p>
      </sec>
      <sec id="sec-2-2">
        <title>2.2 Conducting and material collection</title>
        <p>With the purpose of nding potential research works answering the research
questions previously announced, the Scopus database was used by introducing
the following criteria:</p>
        <p>Search terms: (Assessment or Evaluation or Evaluating) and (Methodology
or Framework or Model) and (Adoption or Contract) and (Saas or Paas or
Iaas or Cloud) and (Public sector or Government or Public institution or
Public entity or E-government).</p>
        <sec id="sec-2-2-1">
          <title>Search area: Computer Science. Document type: Conference paper or Journal paper. Search eld type: Abstract, title and keywords. Language: English.</title>
        </sec>
        <sec id="sec-2-2-2">
          <title>Thus, the query introduced in the database is:</title>
          <p>(TITLE-ABS-KEY(assessment)OR TITLE-ABS-KEY(evaluation)OR
TITLE-ABS-KEY(evaluating)) AND
(TITLE-ABSKEY(methodology)OR TITLE-ABS-KEY(framework)OR
TITLE-ABSKEY(model)) AND
TITLE-ABS-KEY(adoption)AND(TITLE-ABSKEY(saas)OR TITLE-ABS-KEY(paas)OR TITLE-ABS-KEY(iaas)OR
TITLE-ABS-KEY(cloud))AND (TITLE-ABS-KEY(public sector)OR
TITLE-ABS-KEY(government)OR TITLE-ABS-KEY(public
institution)OR TITLE-ABS-KEY(e-government)) AND (
LIMITTO(SUBJAREA,"COMP" ) OR LIMIT-TO(SUBJAREA,"ENGI" ) )
AND ( LIMIT-TO(DOCTYPE,"cp" ) OR LIMIT-TO(DOCTYPE,"ar"
) ) AND ( LIMIT-TO(LANGUAGE,"English" ) )</p>
          <p>With these criteria, the Scopus search engine returned 48 candidate articles.
To reduce the number of articles included in the analysis, rstly, a review of the
articles titles was carried out. This lter reduced the number to 39. Secondly,
a reading of articles abstracts was undertaken to lter those works that do not
present evidence of answering any of the analysis questions. This lter limited
the number of articles to 17 works. Thirdly, a complete reading of the articles
was performed to select the nal works set made up of 10 articles which were
identi ed and included in the analysis. The articles set includes relevant
information about assessment aspects and methods speci cally developed for the state
sector or initially proposed for the private sector and then adapted for the public
one.</p>
        </sec>
      </sec>
      <sec id="sec-2-3">
        <title>2.3 Summarising</title>
        <p>In this step, the relevant information of each selected article was identi ed,
extracted and summarised. In the following paragraphs a description of the articles
is presented.</p>
        <p>
          In [
          <xref ref-type="bibr" rid="ref9">9</xref>
          ], the authors propose a set of assessment aspects to facilitate cloud
adoption in small and medium sized enterprises, speci cally focusing on two
cloud models: Software as a Service (SaaS) and Platform as a Service (PaaS).
These aspects were recognised by the authors through interviews with operation
managers, IT managers and support sta of the IT area. The identi ed aspects
are described as follows: (i) Current state of IT infrastructure which aims at
determining if the use of cloud services is required to support new requirements or
replace a part of the current internal infrastructure. (ii) User perception which
is related to the utility delivered to the user to perform its activities such as
saving time performing speci c tasks. (iii) Security related to the lack of
control over information expressed by the managers in the interviews. (iv) Political
concerning regulatory policies enabling a better competition and service o ers
by the cloud providers. (v) Economic which is focused on operational e ciency
and costs reduction of hardware, software and maintenance. (vi) Social related
to provide opportunities to the development of new user capabilities which could
lead to a greater job satisfaction. (vii) Technological allowing the assessing of
the quality, accessibility, compatibility with devices as well as portability of the
service.
        </p>
        <p>
          In [
          <xref ref-type="bibr" rid="ref10">10</xref>
          ] the authors analyse the main elements that need to be considered
when adopting cloud services in the Indian public context. They take thus into
account the following aspects for adopting and managing cloud services: (i)
Technical, it is related to the necessity of initially training people in the use of devices
allowing them to access to the services. (ii) Cultural, it focuses on the creation of
moral values that promote the correct use of services. (iii) Political, it is related
to the system of public policies that should be established with the purpose of
maintaining the cohesion between society and the planned objectives in the
moment of adopting cloud services. (iv) Social, this aspect is based on equality and
justice principles. Under these principles, it is fundamental to train people about
rights and duties when accessing to cloud services. (v) Psychological, it concerns
the training in the good utilisation of services, civic participation, resolution
of concerns and development of communication skills. (vi) Cost, it includes the
cost of hardware, software, and human resources to maintain IT infrastructures
versus the cost of contracting cloud services
        </p>
        <p>
          The authors in [
          <xref ref-type="bibr" rid="ref11">11</xref>
          ] study the relevant aspects and bene ts of adopting cloud
services in the context of public and private companies. This study was carried
out through interviews to internal and external IT sta involved in the decision
of adopting cloud services. The interviews were analysed by means of descriptive
statistics giving as a result the following aspects: (i) Mobility and accessibility
that refer to the capability of accessing to cloud services from any location and
any device. (ii) Service responsibility concerning the degree of responsibility in
topics such as security, information reliability and information integrity that the
cloud provider is able to agree. (iii) Security, addressing how cloud providers will
guarantee the security in terms of encryption, access authentication, anti-virus
protection, rewall, and service availability. (iv) Longevity of data storage that
implies information maintenance and evaluates how long backups should stand.
        </p>
        <p>
          In [
          <xref ref-type="bibr" rid="ref12">12</xref>
          ] the authors evaluate the convenience and viability of adopting cloud
services through interviews with IT managers, outsourcing specialists, SaaS
decision-makers and IT experts. Their answers were summarised under the
following ve evaluation aspects: (i) organisational aspect is related to evaluating
the organisational changes required for adopting cloud services according to
aspects such as service levels agreed with the IT provider. (ii) Performance that
involves not only speed or quality, but also associates security issues as well as
knowledge of current regulations. (iii) Decision that is associated to the
selection between public, private or hybrid solutions depending on the nature of the
nal user, i.e. general public or government employees. (iv) Contracts that could
be short-term or long-term depending on the responsibilities and agreements
between the provider and the public entity. (v) Relationships with providers,
since the responsibilities move from the personnel of the public entity IT area
to the SaaS supplier. As a consequence, it is crucial to de ne the mechanisms to
establish the appropriate relationships between the two involved parts.
        </p>
        <p>
          In [
          <xref ref-type="bibr" rid="ref13">13</xref>
          ], the authors focus their study on the identi cation of factors that
in uence positively the adoption of cloud services, speci cally by using the SaaS
model. To this end, they use a combination of TOE (Technology - Organisation
- Environment) framework and DOI (Di usion Of Innovation) model, in
addition to interviews with IT managers of public sector in Australia. The identi ed
aspects obtained from this approach were: (i) Competitiveness, described as the
organisation capability to innovate with a service and generates a competitive
advantage. (ii) Compatibility, de ned as the ability to use a cloud service
without generating a great negative impact in the organisation. (iii) Cost described
as a relevant factor which considers the potential bene ts such as costs
reduction and decrease in investments in own IT infrastructures. (iv) Technological
capability, referred in this work as the organisation current state of technology.
This aspect will determine if the organisation is ready to adopt cloud services,
or conversely, it has technological or organisational limitations that would cause
negative impacts.
        </p>
        <p>
          The author in [
          <xref ref-type="bibr" rid="ref14">14</xref>
          ] argues that it is necessary to develop an in-depth study
about the critical aspects for adopting cloud services in state entities.
Specifically, this work analyses an e-invoicing service through an integrated model
based on the Uni ed Theory of Acceptance and Use of Technology 2 (UTAUT2)
with the aim of identifying and evaluating the main aspects for adopting cloud
services. The identi ed aspects are: (i) Use expectation aiming at assessing the
cloud service convenience through the evaluation of the user intention to
employ the service. (ii) Trust which is motivated by the adoption and use of cloud
services according to the credibility of the e-government from the perspective of
users. (iii) Perceived Risk described as a risk identi ed by a citizen, which will
determine if the citizen will use a cloud service or not.
        </p>
        <p>
          In [
          <xref ref-type="bibr" rid="ref15">15</xref>
          ], the authors propose to evaluate important aspects when adopting
cloud services, through the use of the TOE framework and a set of interviews
with cloud services providers and healthcare sector experts. As a result, the
following aspects were identi ed: (i) Privacy of patients data and their health status
during the processing and the storage of this information. (ii) Security that need
to be assured through access controls and authentication, as well as safe
mechanisms to transfer data. (iii) Reliability that is related to keeping information free
of errors in order to support decision making process in critical moments. (iv)
Legal environment since the health care organisations are concerned about legal
remedies that can be used by patients or their relatives if personal information is
hacked or leaked out. (v) Top management support is considered as fundamental
for the provision of resources for adopting cloud services.
        </p>
        <p>
          The authors in [
          <xref ref-type="bibr" rid="ref16">16</xref>
          ] propose a model to predict the aspects in uencing the
adoption of cloud services. This model is an extension of the Technology
Acceptance Model (TAM), which includes three additional perspectives named as
computational self e cacy, trust and job opportunity. The proposed method
consists in neural networks and linear regressions. The aspects included in the
model are: (i) Usefulness perception, de ned as the bene t that the users
perceive when they use a new technology, e.g. a new acquired learning or usefulness
to perform a task. (ii) Ease of use is related to how simple is to interact with a
cloud service and learn from it. (iii) Trust is composed by three elements: ability
of the users to generate skills when using a cloud service; integrity which refers
to the commitment of the cloud service provider to comply with the agreements;
and benevolence which is the assurance that the provider will provide the entity
with the best service possible. (iv) Job opportunity refers to the users perception
of the potential future employability when using cloud services.
        </p>
        <p>
          According to [
          <xref ref-type="bibr" rid="ref17">17</xref>
          ], cloud computing is a technology model which brings
substantial bene ts to the organisations and their clients. Through interviews with
IT executives and a market research, the next aspects were determined as the
main ones for adopting cloud services: (i) Security, since it is di cult to hire
and maintain personnel with experience in security. (ii) Reliability, composed by
the availability and the system migration to avoid service interruption, as well
as the infrastructure capability and the Internet bandwidth of the company. (iii)
Cost, focused on the cost of the bandwidth needed to provide and use cloud
services, since there are geographic locations where the bandwidth is limited and
the service cost is high.
        </p>
        <p>
          The adoption of cloud services in Indonesian companies is studied in [
          <xref ref-type="bibr" rid="ref18">18</xref>
          ]
through 147 interviews by means of the combination of the TOE framework and
the DOI model. As a result, a set of ordinal variables are generated in order to
perform a logistic regression and identify the main aspects for adopting cloud
services. From this process, the following aspects were established: (i)
Compatibility is speci ed as the ease of adopting a service according to the current IT
infrastructure, necessities and operation of the company. (ii) Market
competition de ned as the company perception about the adoption of cloud services as
mechanism for surviving in a highly competitive environment . (iii) Government
support which can be provided through di erent means, e.g. issuing regulation
policies for the protection of customer information, diminishing bandwidth costs,
diminishing taxes for software and hardware acquisition, improving IT national
infrastructure, among others.
        </p>
      </sec>
    </sec>
    <sec id="sec-3">
      <title>3 Reporting</title>
      <p>The contribution of the 10 selected articles according to the three assessment
categories previously established are condensed as follows: Table 2 presents the
context, Table 3 shows the assessment aspects, and, nally, Table 4 describes the
assessment methods. Considering the information in Table 2, a summary for the
research questions associated to the context category are described as follows:</p>
      <sec id="sec-3-1">
        <title>Which industrial sector does the research work apply to? Even</title>
        <p>
          though all the analysed works present contributions for the state sector,
[
          <xref ref-type="bibr" rid="ref17 ref18 ref9">9, 17, 18</xref>
          ] were initially intended for the private sector and then their
contributions analysed and adapted for the state sector. In addition, only two
Ref
[
          <xref ref-type="bibr" rid="ref9">9</xref>
          ]
[
          <xref ref-type="bibr" rid="ref11">11</xref>
          ]
[
          <xref ref-type="bibr" rid="ref10">10</xref>
          ] Public Sector vTioceesvablyuuatseintghae cseotnvoefnaisepneccetsofparedvoipotuisnlgy cidloeundtiseerd- SaaS
Public and To identify aspects and bene ts for
private sector adopting cloud services
Cloud computing
services in general
[
          <xref ref-type="bibr" rid="ref12">12</xref>
          ] Public sector vTioceesvablyuuatseintghae cseotnvoefnaisepneccetsofparedvoipotuisnlgy cidloeundtiseerd- SaaS
[
          <xref ref-type="bibr" rid="ref13">13</xref>
          ] Public sector cTloouiddesnetrivfyicaesspects and bene ts for adopting Cloud computing
services in general
SaaS, speci cally
e[
          <xref ref-type="bibr" rid="ref14">14</xref>
          ] Public sector vTioceesvablyuuatseintghae cseotnvoefnaisepneccetsofparedvoipotuisnlgy cidloeundtiseerd- invoicing services
[
          <xref ref-type="bibr" rid="ref15">15</xref>
          ] tHheeapltuhbcliacrseeicn- vTioceesvablyuuatseintghae cseotnvoefnaisepneccetsofparedvoipotuisnlgy cidloeundtiseerd- hSeaaalSt,h carespseecriviccaelly
tor
[
          <xref ref-type="bibr" rid="ref16">16</xref>
          ] IT in the pub- To predict aspects for adopting cloud Cloud computing
lic and private services services in general
sectors
[
          <xref ref-type="bibr" rid="ref17">17</xref>
          ] Private sector sTeorvidiceenstify aspects for adopting cloud
[
          <xref ref-type="bibr" rid="ref18">18</xref>
          ] Private sector vTioceesvablyuuatseintghae cseotnvoefnaisepneccetsofparedvoipotuisnlgy cidloeundtiseerd- SaaS
Cloud computing
services in general
works were developed from their beginning for both sectors [
          <xref ref-type="bibr" rid="ref11 ref16">11, 16</xref>
          ]. Last,
only two sub sectors were identi ed: healthcare and IT.
        </p>
      </sec>
      <sec id="sec-3-2">
        <title>What is the main objective of the research work? Two common objec</title>
        <p>tives are: (i) To identify aspects for evaluating the convenience and viability
of adopting cloud services. (ii) To evaluate the convenience and viability of
adopting cloud services by using a set of aspects previously identi ed.</p>
      </sec>
      <sec id="sec-3-3">
        <title>What service model is the research work intended to? Works eval</title>
        <p>uating cloud services speci cally for the state sector are mainly related to
the SaaS service model. Works originally intended for the private sector and
then adapted for the state sector deal additionally with PaaS service model.
Therefore, we found a lack of propositions to the evaluation of the
convenience of adopting cloud services speci cally for the IaaS model.
Summarizing the Table 3, it is concluded the following for the assessment aspects
element:</p>
      </sec>
      <sec id="sec-3-4">
        <title>How can practitioners evaluate the economic feasibility of adopting</title>
        <p>cloud services? According to the review, to obtain top management
support is one of the main aspects to ensure the economic feasibility of adopting
cloud services. This is necessary in order to assure the nancial resources to
contract the services. Other important economic aspects practitioners need
to estimate before making the decision of adopting cloud services are: (i)
opRef</p>
        <p>Assessment aspects</p>
        <p>Other
Current state of IT infrastructure
User perception
Security
Political
Social
Technological
Technical
Cultural
Political
Social
Psychological
Mobility and accessibility
Service responsibility
Security
Longevity of data storage
erational e ciency gains for the state entity, (ii) decreased investments in
acquiring software, hardware and other IT infrastructures, (iii) costs reduction
in human resources and maintenance of IT infrastructures, (iv) Bandwidth
costs necessary to access the cloud services.</p>
      </sec>
      <sec id="sec-3-5">
        <title>Are there other assessment aspects in addition to the economic</title>
        <p>
          one? The other assessment aspects can be grouped in four great sets: (i)
social and cultural aspects, (ii) technological and security aspects, (iii) user
environment perception aspects and (iv) political and regulatory aspects.
[
          <xref ref-type="bibr" rid="ref10">10</xref>
          ] There is no assessment method
[
          <xref ref-type="bibr" rid="ref11">11</xref>
          ] sDuersvceryipstive statistics of interviews and
        </p>
        <p>Classi cation of interview answers in ve
areas of SaaS adoption</p>
        <p>Metrics are not de ned</p>
        <p>Service availability percentage
Data encryption level
Control and deliver levels of
providers IT service
Time contract with provider</p>
        <p>
          Cmoomdeblintoataiosnsesosf iTntOeErviferwamsework and DOI Metrics are not de ned
[
          <xref ref-type="bibr" rid="ref14">14</xref>
          ] Integrity model based on UTAUT 2
[
          <xref ref-type="bibr" rid="ref15">15</xref>
          ] TOE framework to assess interviews
        </p>
        <p>TAM model plus three additional
perspectives (computational self e
cacy, trust and job opportunity)
Linear regression and neural
networks
Irnesteearvrciehws with IT executives and a market Bandwidth use level</p>
        <p>Interviews assessment, TOE
framework and DOI model
Logistic regression and neural
networks</p>
        <p>Metrics are not de ned
Metrics are not de ned</p>
        <p>Data privacy level</p>
        <p>
          Data quality level
Metrics are not de ned
Ref.
[
          <xref ref-type="bibr" rid="ref9">9</xref>
          ]
[
          <xref ref-type="bibr" rid="ref12">12</xref>
          ]
[
          <xref ref-type="bibr" rid="ref13">13</xref>
          ]
[
          <xref ref-type="bibr" rid="ref16">16</xref>
          ]
[
          <xref ref-type="bibr" rid="ref17">17</xref>
          ]
[
          <xref ref-type="bibr" rid="ref18">18</xref>
          ]
Considering the information explained in Table 4 about assessment method, the
following conclusions were determined for each one of the research questions:
        </p>
      </sec>
      <sec id="sec-3-6">
        <title>Which are the methods employed to evaluate or identify the as</title>
        <p>pects? The aspects are evaluated or proposed according to three main
methods: (i) assessment based on framework or model, (ii) assessment based on
descriptive statistics, and (iii) assessment through regression model and
neural networks.</p>
      </sec>
      <sec id="sec-3-7">
        <title>What are the metrics used to evaluate the cloud services? In the</title>
        <p>research work metrics depend on the type of aspect identi ed or evaluated.
Concerning units of measure, quantitative units are assigned to those aspects
that can be measured in percentages or ordinal values. On the contrary,
qualitative units are focused on aspects related to IT environment perception
and peoples perception.</p>
      </sec>
    </sec>
    <sec id="sec-4">
      <title>4 Discussion and conclusion</title>
      <p>This article presents a review of research works to assess the convenience of
adopting cloud services by using three evaluation categories: context, assessment
aspects and assessment method. Each category includes criteria with related
questions to analyse the contribution of each work to the criteria.</p>
      <p>The rst category, context, is intended to analyse the domain, goal and scope
of the reviewed approaches. Regarding the domain, we found that some of the
works, initially intended for the private sector, could be analysed and adapted
for the state sector. This fact shows that even though each sector involves di
erent issues, some of them are common and the evaluation aspects can be adapted
from a sector to another. In addition, the revision of the works for healthcare
and IT subsectors evidences the need for speci c works dealing with the speci c
characteristics of a given context. With respect to the second criterion, we found
two main goals: (i) to identify and propose key assessment aspects for the
adoption of cloud services; (ii) to evaluate the convenience of adopting cloud services
by using aspects identi ed in previous works. The rst goal is formulated mainly
by works originally addressing the private sector and then adapted to the public
one. The second goal is de ned by works speci cally intended the state sector.
Concerning the third criterion, scope, it was possible to determine that most of
the works evaluate SaaS and PaaS models. With respect to the SaaS
evaluation, only two works evaluates SaaS for speci c services, namely, e-invoicing and
healthcare. The works addressing cloud services in general are too generic and
do not tackle the characteristics of each cloud model. Lastly, we can identify a
lack of research speci cally related to IaaS model.</p>
      <p>Concerning the second category, namely, assessment aspects, in the nancial
evaluation, one of the main conclusions is that top management support is
important to facilitate the adoption of the service. Indeed, without its sponsor, even
though the general evaluation of the service shows the feasibility of its adoption,
it could be a ected because of the di culty to obtain the economic resources
to contract it. In addition, most of the identi ed nancial aspects, such as the
decrease in investments in acquiring software and other IT infrastructures, are
mainly oriented to reduce costs in IT operation. Therefore, the reviewed works
do not show how the adoption of cloud services could be economically viable in
terms of generation of nancial bene ts for citizens, communities, general state
and other bene ciaries of the services. Regarding the other assessment aspects,
they include social and cultural aspects that need to be evaluated in the state
sector such as the cultural impact and the user perception and acceptance of
the services. In the same way, political and regulatory aspects are considered
as the state entities are subject to changes in regulation and leadership because
of elections and o cial designations. Respecting to the technology aspects, only
quality aspects of the service such as data security, capability and availability
are considered. As a consequence, there is a lack of evaluation of functionality
aspects that are essential, mostly when evaluating SaaS propositions, to
establish the match level between the o ered service and the functional requirements
of the state organisation.</p>
      <p>Respecting to the third category, assessment method, frameworks for
technology adoption such as TAM, TOE and DOI, initially intended for the private
sector, are extended or adapted to the evaluation of cloud services for the state
sector. Similarly, there is a limited quantity of works that have clearly de ned
metrics to measure the assessment aspects.</p>
      <p>
        Finally, only one work [
        <xref ref-type="bibr" rid="ref12">12</xref>
        ] suggests to evaluate organisational aspects such
as the need of establishing Service Level Agreements and signing contracts with
cloud providers. It constitutes an issue not well covered and further research is
needed because of the importance of de ning customer and provider
responsibilities in the cloud sourcing model [
        <xref ref-type="bibr" rid="ref19">19</xref>
        ].
      </p>
    </sec>
  </body>
  <back>
    <ref-list>
      <ref id="ref1">
        <mixed-citation>
          1.
          <string-name>
            <surname>Armbrust</surname>
            <given-names>M.</given-names>
          </string-name>
          <string-name>
            <surname>Fox</surname>
            <given-names>A.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Gri</surname>
            th
            <given-names>R.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Joseph</surname>
            <given-names>A.D.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Katz</surname>
            <given-names>R.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Konwinski</surname>
            <given-names>A.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Lee</surname>
            <given-names>G.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Patterson</surname>
            <given-names>D.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Rabkin</surname>
            <given-names>A.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Stoica</surname>
            <given-names>I.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Zaharia</surname>
            <given-names>M.:</given-names>
          </string-name>
          <article-title>A View of Cloud Computing</article-title>
          .
          <source>Communications of the ACM</source>
          .
          <volume>53</volume>
          ,
          <issue>50</issue>
          {
          <fpage>58</fpage>
          (
          <year>2010</year>
          ).
        </mixed-citation>
      </ref>
      <ref id="ref2">
        <mixed-citation>
          2. Zhang Q., Cheng L., and Boutaba R.:
          <article-title>Cloud computing: state-of-the-art and research challenges</article-title>
          .
          <source>JISA. 1</source>
          , pp.
          <volume>7</volume>
          {
          <issue>18</issue>
          (
          <year>2010</year>
          ).
        </mixed-citation>
      </ref>
      <ref id="ref3">
        <mixed-citation>
          3.
          <string-name>
            <surname>Subashini</surname>
            <given-names>S.</given-names>
          </string-name>
          and
          <string-name>
            <surname>Kavitha</surname>
            <given-names>V.</given-names>
          </string-name>
          :
          <article-title>A survey on security issues in service delivery models of cloud computing</article-title>
          .
          <source>J. Netw. Comput. Appl</source>
          .
          <volume>34</volume>
          ,
          <issue>1</issue>
          {
          <fpage>11</fpage>
          (
          <year>2011</year>
          ).
        </mixed-citation>
      </ref>
      <ref id="ref4">
        <mixed-citation>
          4.
          <string-name>
            <surname>Marston</surname>
            <given-names>S.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Zhi</surname>
            <given-names>L.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Bandyopadhyay</surname>
            <given-names>S.</given-names>
          </string-name>
          , Zhang J., and
          <string-name>
            <surname>Ghalsasi</surname>
            <given-names>A.</given-names>
          </string-name>
          :
          <article-title>Cloud computing The business perspective</article-title>
          .
          <source>J. Decis. Support Syst</source>
          .
          <volume>51</volume>
          ,
          <issue>176</issue>
          {
          <fpage>189</fpage>
          , (
          <year>2010</year>
          ).
        </mixed-citation>
      </ref>
      <ref id="ref5">
        <mixed-citation>
          5.
          <string-name>
            <surname>Venkatesh</surname>
            <given-names>V.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Chan</surname>
            <given-names>F.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Thong</surname>
            <given-names>J</given-names>
          </string-name>
          .:
          <article-title>Designing e-government services: Key service attributes and citizens' preference structures</article-title>
          .
          <source>J. Oper. Manag</source>
          .
          <volume>30</volume>
          ,
          <issue>116</issue>
          {
          <fpage>133</fpage>
          (
          <year>2012</year>
          ).
        </mixed-citation>
      </ref>
      <ref id="ref6">
        <mixed-citation>
          6.
          <string-name>
            <surname>Mohamed</surname>
            <given-names>F.</given-names>
          </string-name>
          and
          <string-name>
            <surname>Ibrahim</surname>
          </string-name>
          . O.:
          <article-title>Models of Adopting Cloud Computing in the EGovernment Context: A Review</article-title>
          .
          <source>Journal Teknology</source>
          .
          <volume>73</volume>
          ,
          <issue>51</issue>
          {
          <fpage>59</fpage>
          (
          <year>2015</year>
          ).
        </mixed-citation>
      </ref>
      <ref id="ref7">
        <mixed-citation>
          7.
          <string-name>
            <surname>Bosse</surname>
            <given-names>S.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Splieth</surname>
            <given-names>M.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Turowski</surname>
            <given-names>K.</given-names>
          </string-name>
          :
          <article-title>Model-Based Prediction of IT Service Availability - A Literature Review</article-title>
          .
          <source>In: 13th International Conference on Modeling and Applied Simulation</source>
          , pp.
          <volume>141</volume>
          {
          <fpage>148</fpage>
          . Curran Associates,
          <string-name>
            <surname>Bordeaux</surname>
          </string-name>
          (
          <year>2014</year>
          ).
        </mixed-citation>
      </ref>
      <ref id="ref8">
        <mixed-citation>
          8.
          <string-name>
            <surname>Seuring</surname>
            <given-names>S.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Mller</surname>
            <given-names>M.</given-names>
          </string-name>
          :
          <article-title>From a literature review to a conceptual framework for sustainable supply chain management</article-title>
          .
          <source>J. Clean. Prod</source>
          .
          <volume>16</volume>
          ,
          <issue>1699</issue>
          {
          <fpage>1710</fpage>
          , (
          <year>2008</year>
          ).
        </mixed-citation>
      </ref>
      <ref id="ref9">
        <mixed-citation>
          9.
          <string-name>
            <surname>Kihara</surname>
            <given-names>T.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>D.</surname>
          </string-name>
          <article-title>Gichoya: Adoption and Use of Cloud Computing in Small and Medium Enterprises in Kenya</article-title>
          . In:
          <string-name>
            <surname>IST-Africa</surname>
            <given-names>Conference</given-names>
          </string-name>
          and
          <string-name>
            <surname>Exhibition (IST-Africa</surname>
            <given-names>)</given-names>
          </string-name>
          , pp.
          <volume>1</volume>
          {
          <fpage>12</fpage>
          . IEEE Press, Nairobi (
          <year>2013</year>
          ).
        </mixed-citation>
      </ref>
      <ref id="ref10">
        <mixed-citation>
          10.
          <string-name>
            <surname>Das R.K</surname>
          </string-name>
          .,
          <string-name>
            <surname>Patnaik</surname>
            <given-names>S.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Misro</surname>
            <given-names>A.K.</given-names>
          </string-name>
          :
          <article-title>Adoption of Cloud Computing in e-Governance</article-title>
          .
          <source>In: Advanced Computing: First International Conference on Computer Science and Information Technology</source>
          , pp.
          <volume>161</volume>
          {
          <fpage>172</fpage>
          . Springer Berlin Heidelberg, Bangalore (
          <year>2011</year>
          ).
        </mixed-citation>
      </ref>
      <ref id="ref11">
        <mixed-citation>
          11.
          <string-name>
            <surname>Charif</surname>
            <given-names>B.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Awad</surname>
            <given-names>A. I.</given-names>
          </string-name>
          :
          <article-title>Business and Government Organizations Adoption of Cloud Computing</article-title>
          .
          <source>In: 15th International Conference Intelligent Data Engineering and Automated Learning</source>
          , pp.
          <volume>492</volume>
          {
          <fpage>501</fpage>
          . Springer International Publishing,
          <string-name>
            <surname>Salamanca</surname>
          </string-name>
          (
          <year>2014</year>
          ).
        </mixed-citation>
      </ref>
      <ref id="ref12">
        <mixed-citation>
          12.
          <string-name>
            <surname>Janssen</surname>
            <given-names>M.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Joha</surname>
            <given-names>A.</given-names>
          </string-name>
          :
          <article-title>Challenges for adopting cloud-based software as a sevice (SAAS) in the public sector</article-title>
          .
          <source>In: 19th European Conference on Information System</source>
          , Helsinki (
          <year>2011</year>
          ).
        </mixed-citation>
      </ref>
      <ref id="ref13">
        <mixed-citation>
          13.
          <string-name>
            <surname>Ali</surname>
            <given-names>O.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Soar</surname>
            <given-names>J.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Yong</surname>
            <given-names>J.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>McClymont</surname>
            <given-names>H.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Angus</surname>
            <given-names>D.</given-names>
          </string-name>
          :
          <article-title>Collaborative Cloud Computing Adoption in Australian Regional Municipal Government: An Exploratory Study</article-title>
          .
          <source>In: 19th International Conference on Computer Supported Cooperative Work in Design</source>
          , pp.
          <volume>540</volume>
          {
          <fpage>548</fpage>
          . IEEE press,
          <source>Calabria</source>
          (
          <year>2015</year>
          ).
        </mixed-citation>
      </ref>
      <ref id="ref14">
        <mixed-citation>
          14.
          <string-name>
            <surname>Lian</surname>
            <given-names>J.W.</given-names>
          </string-name>
          :
          <article-title>Critical factors for cloud based e-invoice service adoption in Taiwan: An empirical study</article-title>
          .
          <source>Int. J. Inf. Manag</source>
          .
          <volume>35</volume>
          ,
          <issue>98</issue>
          {
          <fpage>109</fpage>
          (
          <year>2015</year>
          ).
        </mixed-citation>
      </ref>
      <ref id="ref15">
        <mixed-citation>
          15.
          <string-name>
            <surname>Sulaiman</surname>
            <given-names>H.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Magaireah</surname>
            <given-names>A. I.</given-names>
          </string-name>
          :
          <article-title>Factors a ecting the adoption of integrated cloudbased e- health record in healthcare organizations: a case study of Jordan</article-title>
          .
          <source>In: 6th International Conference on Information Technology and Multimedia</source>
          , pp.
          <volume>102</volume>
          {
          <fpage>107</fpage>
          . IEEE press,
          <source>Putrajaya</source>
          (
          <year>2014</year>
          ).
        </mixed-citation>
      </ref>
      <ref id="ref16">
        <mixed-citation>
          16.
          <string-name>
            <surname>Sharma</surname>
            <given-names>S.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Al-Badi</surname>
            <given-names>A.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Govindaluri</surname>
            <given-names>S.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Al-Kharusi</surname>
            <given-names>M.:</given-names>
          </string-name>
          <article-title>Predicting motivators of cloud computing adoption: A developing country perspective</article-title>
          .
          <source>J. Comput. Hum. Behav</source>
          .
          <volume>62</volume>
          ,
          <issue>61</issue>
          {
          <fpage>69</fpage>
          (
          <year>2016</year>
          ).
        </mixed-citation>
      </ref>
      <ref id="ref17">
        <mixed-citation>
          17.
          <string-name>
            <surname>Mujinga</surname>
            <given-names>M.</given-names>
          </string-name>
          :
          <article-title>Privacy and Legal Issues in Cloud Computing - The SMME Position in South Africa</article-title>
          .
          <source>In: 11th Australian Information Security Management Conference</source>
          , pp.
          <volume>49</volume>
          {
          <fpage>59</fpage>
          . Edith Cowan University, Perth (
          <year>2013</year>
          ).
        </mixed-citation>
      </ref>
      <ref id="ref18">
        <mixed-citation>
          18.
          <string-name>
            <surname>Mangula</surname>
            <given-names>I</given-names>
          </string-name>
          .,
          <string-name>
            <surname>van de Weerd</surname>
            <given-names>I.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Brinkkemper</surname>
            <given-names>S.:</given-names>
          </string-name>
          <article-title>The adoption of software-as-aservice: An Indonesian case study</article-title>
          .
          <source>In: 18th Paci c Asia Conference on Information Systems</source>
          , Chengdu (
          <year>2014</year>
          ).
        </mixed-citation>
      </ref>
      <ref id="ref19">
        <mixed-citation>
          19.
          <string-name>
            <surname>Avila</surname>
            <given-names>O.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Sastoque</surname>
            <given-names>S.:</given-names>
          </string-name>
          <article-title>A Survey on Availability calculation and de nition for Information Technology Services</article-title>
          ,
          <source>In: 20th Paci c Asia Conference on Information Systems - PACIS</source>
          <year>2016</year>
          , pp.
          <volume>259</volume>
          {
          <fpage>270</fpage>
          . (
          <year>2016</year>
          ).
        </mixed-citation>
      </ref>
    </ref-list>
  </back>
</article>