1.1 Introduction
Cloud computing is defined as a model for enabling ubiquitous, convenient, on-demand network access to a shared pool of configurable computing resources such as networks, servers, storage, applications, and services that can be rapidly provisioned and released with minimal management effort or service provider interaction (NIST, 2011). In modern financial environments, cloud computing has become a critical infrastructure for banking operations due to its ability to support real-time transaction processing, scalability, cost efficiency, and improved service delivery.
In the banking sector, sensitive financial transaction data refers to any confidential information generated during banking activities, including customer account details, payment records, authentication credentials, and interbank transfer data. The protection of such data is essential because it directly affects customer trust, financial stability, and institutional reputation. According to ISO/IEC 27001 (2018), organizations are required to implement structured information security management systems to ensure the confidentiality, integrity, and availability of sensitive information assets.
As a prelude to other parts of this study, this chapter will discuss the background upon which this study was initiated, the statement of problems that led to this study, the Aim and Objectives of the study. Others are Significance of the study, Scope of work, Limitation of the study and Definition of technical terms.
1.2 Background of Study
The rapid evolution of cloud computing has significantly transformed the way financial institutions manage, process, and store sensitive financial transaction data. Cloud computing is defined by the National Institute of Standards and Technology (NIST, 2011) as a model that enables ubiquitous, convenient, on-demand network access to a shared pool of configurable computing resources such as networks, servers, storage, applications, and services that can be rapidly provisioned with minimal management effort or service provider interaction. According to Mell and Grance (2011), cloud computing provides scalable resources that allow organizations to reduce infrastructure costs while improving flexibility and service delivery. They further reported that the adoption of cloud services in financial institutions has increased due to its ability to support dynamic workloads and enable faster deployment of banking applications. However, despite these advantages, the security of sensitive financial transaction data remains a major concern.
Cloud Security Alliance (CSA, 2021) asserted that, cloud environments introduce several security challenges such as data breaches, insecure interfaces, account hijacking, and inadequate identity management systems. CSA asserted that these vulnerabilities are among the top threats affecting cloud adoption in financial institutions globally. These risks are particularly critical in the banking sector, where the confidentiality, integrity, and availability of transaction data must be strictly maintained. According to ISO/IEC 27001 (2018), organizations are required to establish, implement, maintain, and continuously improve an information security management system to protect sensitive information assets. ISO contends that without a structured security framework, organizations remain exposed to cyber threats that can compromise data integrity and lead to financial losses. In the context of cloud-based banking systems, this requirement becomes even more important due to the distributed and shared nature of cloud infrastructure.
According to ENISA (European Union Agency for Cybersecurity, 2020), financial institutions are increasingly targeted by cybercriminals due to the high value of financial transaction data. ENISA stated that attackers often exploit weaknesses in cloud configurations, weak authentication mechanisms, and insufficient monitoring systems to gain unauthorized access to sensitive financial information. Sharma and Gupta (2019) asserted that, the integration of cloud computing in banking systems has improved service delivery but has also expanded the attack surface for cyber threats. They affirmed that many banks struggle with balancing accessibility and security, especially when dealing with real-time financial transactions. Sharma and Gupta contended that inadequate encryption mechanisms and weak access control policies are major contributors to data vulnerability in cloud-based banking systems.
Access Bank Plc, like many leading financial institutions in Nigeria, has embraced digital transformation by integrating cloud-based technologies into its operational framework to enhance efficiency and customer service delivery. However, according to Adeyemi and Ojo (2022), the adoption of cloud infrastructure in Nigerian banks has exposed critical gaps in cybersecurity readiness, particularly in safeguarding sensitive financial transaction data. They reported that many financial institutions still rely on traditional security models that are not fully adapted to cloud environments.
According to Olaniyan et al. (2023), the Nigerian banking sector faces increasing cyber threats such as phishing attacks, ransomware, and distributed denial-of-service (DDoS) attacks, which often target cloud-based systems. They asserted that the lack of a comprehensive and adaptive security architecture increases the risk of financial data exposure and system compromise. This situation is further worsened by limited real-time threat detection and inadequate incident response mechanisms in some financial institutions (Olaniyan et al., 2023). Kaspersky (2023) stated that, cybercriminal activities targeting financial institutions have become more sophisticated, leveraging automation and artificial intelligence to bypass traditional security controls. Kaspersky stated that financial transaction systems hosted on cloud platforms require multi-layered security approaches, including encryption, intrusion detection systems, and continuous monitoring to mitigate emerging threats.
According to the Central Bank of Nigeria (CBN, 2022), financial institutions operating in Nigeria are required to comply with strict cybersecurity guidelines aimed at protecting customer data and ensuring the resilience of digital financial systems. The CBN affirmed that compliance with cybersecurity frameworks is essential for maintaining public trust and financial stability in the banking sector. This study is set against the backdrop of the increasing reliance on cloud computing in financial institutions, the rising complexity of cyber threats targeting banking systems, and the need for a robust, secure, and adaptive cloud network framework that ensures the protection of sensitive financial transaction data in Access Bank Plc, Lagos State.
1.3 Statement of Problem
Investigation revealed that poor identity governance remains one of the leading causes of cloud security incidents in financial systems. On the other hand, insufficient encryption of data during transmission and storage further exposes sensitive financial transaction data to interception and manipulation (Cloud Security Alliance, 2021).
Another critical issue is misconfiguration of cloud infrastructure, which leads to unintended exposure of sensitive banking data. ISO/IEC 27001 (2018) contends that lack of proper configuration management increases the risk of security breaches in information systems. Additionally, limited real-time monitoring and delayed threat detection reduce the effectiveness of existing security systems in preventing advanced cyberattacks.
Furthermore, the current system lacks a unified and organization-specific secure cloud network framework that integrates multi-layer security controls such as intrusion detection, zero-trust architecture, and adaptive authentication mechanisms. It is against this backdrop that this study seeks to design a secure cloud network framework for protecting sensitive financial transaction data in Access Bank Plc, Lagos State.
1.4 Aim and Objectives of the Study
The aim of this study is to design and develop a secure cloud network framework for protecting sensitive financial transaction data in Access Bank Plc, Lagos State. In achieving this aim, the following specific objectives were laid out as follows:
- To create a secure cloud network framework that will improve data protection in financial transaction systems.
- To develop encryption and identity management mechanisms that will secure sensitive banking data in cloud environments.
- To design a multi-layer security architecture that will reduce vulnerabilities in cloud-based banking operations.
- To implement intrusion detection and monitoring systems that will enhance real-time threat detection.
- To evaluate the effectiveness of the proposed framework in improving cloud security in Access Bank Plc.
1.5 Significance of Study
It is believed that at the completion of the study, the outcome will improve the security of cloud-based financial transaction systems in Access Bank Plc by reducing data breaches and unauthorized access incidents. Also, the study will enhance the implementation of secure cloud network frameworks in Nigerian financial institutions in line with Central Bank of Nigeria cybersecurity guidelines.
Furthermore, the research will strengthen compliance with ISO/IEC 27001 information security standards in cloud banking operations. In addition, the study will support improved customer trust by ensuring better protection of sensitive financial data.
Lastly, the research will contribute to the development of more resilient and adaptive cybersecurity strategies in the Nigerian banking sector.
1.6 Scope and Limitations of the Study
The scope of this study is limited to Access Bank Plc, Lagos State, Nigeria, focusing on the design of secure cloud network frameworks for protecting sensitive financial transaction data in cloud-based banking operations.
The study was limited by restricted access to sensitive banking security infrastructure and internal cybersecurity configurations.
1.7 Definition of Terms
Cloud Computing:
Cloud Computing refers to a model that enables on-demand access to shared computing resources over the internet, allowing flexible and scalable data processing (NIST, 2011). It is widely used in banking systems to support digital financial services.
Secure Cloud Network Framework:
Secure Cloud Network Framework refers to a structured set of security controls and architectural designs implemented to protect data and applications in cloud environments from unauthorized access and cyber threats (CSA, 2021).
Sensitive Financial Transaction Data:
Sensitive Financial Transaction Data refers to confidential banking information such as account details, payment records, and transfer histories that must be protected from unauthorized disclosure or modification.
Encryption:
Encryption refers to the process of converting data into a coded format to prevent unauthorized access during storage or transmission (ISO/IEC 27001, 2018).
Identity Management:
Identity Management refers to the system used to verify and manage user access rights within a computing environment to ensure that only authorized users can access sensitive data (NIST, 2011).
Intrusion Detection System:
Intrusion Detection System refers to a security mechanism designed to monitor network activities and detect suspicious behavior or cyberattacks in real time (CSA, 2021).
…