Context-Aware Enterprise Cloud Risk Assessment Through Zero-Trust Analytics and Automated Security Compliance Validation

Siti Norul Huda Sheikh Abdullah; Siti Norul Huda Sheikh Abdullah

doi:10.15662/ijetemr.2025.1005010

Context-Aware Enterprise Cloud Risk Assessment Through Zero-Trust Analytics and Automated Security Compliance Validation

Siti Norul Huda Sheikh Abdullah

Center for Cyber Security, Faculty of Information Science and Technology, Malaysia

Abstract

Enterprise cloud environments increasingly rely on distributed applications, hybrid infrastructure, multi-cloud services, and interconnected data platforms, creating complex security risks and compliance challenges. Traditional risk assessment methods often depend on static policies, periodic audits, and isolated monitoring systems, limiting their ability to identify evolving threats and context-dependent vulnerabilities. This research proposes a context-aware enterprise cloud risk assessment framework that integrates Zero-Trust analytics, automated security compliance validation, and intelligent risk prioritization. The framework continuously evaluates user identities, device conditions, access privileges, workload behavior, network activity, resource configurations, and regulatory requirements to determine dynamic risk levels. Machine learning techniques support anomaly detection and risk prediction, while policy-as-code mechanisms automate compliance checks against predefined security controls. Zero-Trust principles enforce continuous verification, least-privilege access, and adaptive authorization decisions according to contextual risk scores. The methodology incorporates security telemetry collection, contextual feature engineering, risk classification, automated policy evaluation, and remediation recommendations. Evaluation criteria include detection accuracy, false-positive rate, compliance validation coverage, response latency, and risk assessment consistency. The proposed approach aims to improve threat visibility, reduce manual compliance effort, and strengthen enterprise security governance across heterogeneous cloud environments. By combining contextual intelligence with automated validation, the framework provides a scalable foundation for proactive cloud risk management, supporting continuous compliance, improved operational resilience, and more informed security decisions in complex enterprise infrastructures.

Article Information

Journal	International Journal of Emerging Trends in Engineering and Management Research
Volume (Issue)	Vol. 10 No. 5 (2025): International Journal of Emerging Trends in Engineering and Management Research (IJETEMR)
DOI	https://doi.org/10.15662/ijetemr.2025.1005010
Pages	18724-18732
Published	October 13, 2025
Copyright	All rights reserved
Open Access	This work is licensed under a Creative Commons Attribution 4.0 International License.
How to Cite	Siti Norul Huda Sheikh Abdullah (%2025). Context-Aware Enterprise Cloud Risk Assessment Through Zero-Trust Analytics and Automated Security Compliance Validation. International Journal of Emerging Trends in Engineering and Management Research , Vol. 10 No. 5 (2025): International Journal of Emerging Trends in Engineering and Management Research (IJETEMR) , pp. 18724-18732. https://doi.org/10.15662/ijetemr.2025.1005010

References

1. Marston, S., Li, Z., Bandyopadhyay, S., Zhang, J., & Ghalsasi, A. (2011). Cloud computing—The business perspective. Decision Support Systems, 51(1), 176–189. https://doi.org/10.1016/j.dss.2010.12.006
2. Jiang, Y., Li, X., Luo, H., Yin, S., & Kaynak, O. (2022). Quo vadis artificial intelligence? Discover Artificial Intelligence, 2, Article 4. https://doi.org/10.1007/s44163-022-00022-8
3. Vemireddy, S. (2022). Architecting personalized tax advisory experiences through event-driven customer data integration. International Journal of Research Publications in Engineering, Technology and Management, 5(6), 7923–7929.
4. Gadige, C. D. (2024). Enterprise integration architecture for AI-powered CRM: Combining Salesforce, MuleSoft, data platforms, and autonomous agents. International Journal of Research and Applied Innovations, 7(3), 10850-10860.
5. Bhagwat, V. B. (2023). Optimizing payroll to general ledger reconciliation: Identifying discrepancies and enhancing financial accuracy. Journal of Advance and Future Research, 1(4), 1–8. https://doi.org/10.56975/jaafr.v1i4.501636
6. Padmanabham, S. (2023). Secure API gateway architecture for open banking. International Journal of Computer Technology and Electronics Communication, 6(6), 8166-8174.
7. Sugumar, R. (2022). Explainable Deep Learning Framework for Financial Fraud Detection and Intelligent Risk Analysis. International Journal of Emerging Trends in Engineering and Management Research, 7(5), 12528.
8. Sahu, S. K. (2025). Cloud-Native Blueprint for Healthcare Payer CRM and Care Management on Salesforce Industries (Vlocity). Journal of Computer Science and Technology Studies, 7(6), 1135-1139.
9. Ravichandran, S., & Kandasamy, V. (2025). Optimized Attention Augmented Residual Convolutional Neural Network with Fa-Resnet for Fabric Defect Detection. Journal of Control Engineering and Applied Informatics, 27(4), 3-15.
10. Karrothu, A. (2025). Exploitability-aware vulnerability prioritization for automated security enforcement in cloud-native applications. International Journal of Science, Research and Technology, 8(2), 13948–13961.
11. Jayaraman, S., Rajendran, S., & P, S. P. (2019). Fuzzy c-means clustering and elliptic curve cryptography using privacy preserving in cloud. International Journal of Business Intelligence and Data Mining, 15(3), 273-287.
12. Kalakoti, M. K. R. (2024). SmartScale: Real-time AI-driven resource optimization for cloud microservices. International Journal of Engineering & Extended Technologies Research, 6(4), 8189–8197.
13. Garg, D. K. (2025). Manufacturing execution systems: A comprehensive guide to selection and implementation. International Journal of Research in Computer Applications and Information Technology, 8(1), 2001–2015. https://doi.org/10.34218/IJRCAIT_08_01_146
14. Mole, M. (2024). Modern business intelligence: Big data analytics and artificial intelligence for creating the data-driven value. International Research Journal of Innovative Engineering, 8(4), 15010–15022.
15. Chinthamani, R. (2025). Reliable Credential Rotation and Runtime Secret Convergence in Large-Scale Cloud-Native Systems. International Journal of Future Innovative Science and Technology (IJFIST), 8(2), 14617.
16. Ahuja, D. (2025, August). Intelligent Failure Prediction in CI/CD Pipelines Using Efficient Machine Learning Techniques. In 2025 5th Asian Conference on Innovation in Technology (ASIANCON) (pp. 1-7). IEEE.
17. Reddy, K. V. (2024). Optimizing gate-level simulation performance through cloud-based distributed computing. International Journal of Research Publications in Engineering, Technology and Management (IJRPETM), 7(6), 11747-11752.
18. Mudunuri, P. R. (2024). Operational transparency as a compliance mechanism in federal DevOps ecosystems. International Journal of Engineering & Extended Technologies Research (IJEETR), 6(3), 8131-8142.
19. Randhi, K. S. (2023). A cloud-native integration framework for enterprise architecture intelligence and application rationalization. International Journal of Science, Research and Technology (IJSRAT), 6(4), 10230–10240.
20. Gantikota, S. (2024). Shift-Left Security for Decentralized Engineering Organizations: Embedding SAST, DAST, and Penetration Testing Throughout the Software Development Lifecycle in University and Research Computing Environments. International Journal of Emerging Research in Engineering and Technology, 5(4), 175-179.
21. Gurram, S. (2025). Data product valuation: Pricing, risk, and ROI of enterprise datasets. ISCSITR-International Journal of Computer Science and Engineering (ISCSITR-IJCSE), 6(5), 1–17.
22. Mysula, S. (2024). Event-driven integration architecture using publication methods for real-time DealCloud business operations & workflows. International Journal of Research and Applied Innovations, 7(4), 11233–11239.
23. Venkatasalam, K., Rajendran, P., & Thangavel, M. (2019). Improving the accuracy of feature selection in big data mining using accelerated flower pollination (AFP) algorithm. Journal of medical systems, 43(4), 96.
24. Basavala, S. R. (2022). Security assessment framework for microservices-based applications using automated penetration testing. International Journal of Emerging Trends in Engineering and Management Research, 7(4), 12179–12190.
25. Puli, S. K., & Pichika, P. B. (2024). An explainable AI framework for predictive clinical specimen quality management and pre-analytical error detection. European Journal of Advances in Engineering and Technology, 11(11), 131–143. https://doi.org/10.5281/zenodo.22669332
26. Natta, P. K. (2022). Computer-vision-assisted retail inventory automation: Integrating autonomous scan data with worklist completion systems. International Journal of Science, Research and Technology, 5(6), 8957–8969.
27. Bandari, U., & Perumal, R. S. (2025). Copilots for self-service BI: A practitioner comparison of generative analytics assistants across enterprise data platforms. International Journal of Engineering & Extended Technologies Research (IJEETR), 7(6), 11312-11322.
28. Selvarajan, K. (2022). Architecting scalable self-service data platforms for enterprise analytics. International Journal of Science, Research and Technology (IJSRAT), 5(2), 7427–7436.
29. Shaik, N. (2024). AI-driven scheduling for multi-cloud Kubernetes: Lessons from enterprise deployment. International Journal of Research and Applied Innovations, 7(3), 10880–10891.
30. Jinna, K. R., & Thilagaraj, S. V. (2024). Tracing across the seam: OpenTelemetry-based observability for hybrid estates where message-oriented middleware and Kubernetes microservices coexist. International Research Journal of Innovative Engineering, 8(5), 15438-15448.
31. Sayyaparaju, K. K., Nunnaguppala, L. S. C., & Padamati, J. R. (2021). Building SecureAI/ML Pipelines: Cloud Data Engineeringfor Compliance and Vulnerability Management. International Journal for Innovative Engineering and Management Research, 10(10), 330.
32. Chandran, A. S. (2024). Engineering billion-query search systems: Lessons from large-scale metadata platforms. International Journal of Research and Applied Innovations, 7(2), 10510–10519.
33. Aragani, V. M., Maroju, P. K., & Mudunuri, L. N. R. (2024, December). Implementing Non-functional Production Regression Testing with Kubernetes. In International Conference on Information and Communication Technology for Competitive Strategies (pp. 231-244). Singapore: Springer Nature Singapore.
34. Ponugoti, M. (2025). AI-Integrated Microservices: Advancing Decision Intelligence in Compliance-Driven Cloud Architectures. Journal Of Engineering And Computer Sciences, 4(7), 1232-1240.
35. Ramasamy, M. (2022). Closed-loop network automation: Architectural principles from Catalyst Center-scale systems. International Research Journal of Innovative Engineering, 6(3), 10698–10708.
36. Kommineni, R. (2023). Hub-and-spoke GitOps delivery for multi-tenant SaaS: Multi-source applications, deterministic environment isolation, and run-once lifecycle tasks. International Journal of Research Publications in Engineering, Technology and Management (IJRPETM), 6(2), 8401–8408.