Cloud computing is causing a transformational shift in the way we do business and protect sensitive data assets and mission critical software applications in an increasingly complex regulatory environment. Organizations are taking a cautious attitude to cloud computing because of concerns about security and compliance with their security policies and respecting regulatory obligations. Thus, the adoption of cloud technologies should always be subject to careful evaluation that is aligned and integrated with risk management processes and information security governance of the organization. What we regularly see in the practice, many times it is not clear who is responsible for data and software security and regulatory compliance in the cloud, whether it is the cloud service customer or cloud service provider, or perhaps hybrid of both. This presentation offers a practical approach and real solution for industry leaders from all industry sectors in the process of adopting cloud services and moving production and business data and software applications to the cloud.