This chapter talks of cloud security in the context of compliance, governance and auditing as the fundamental principles of using clouds safely and responsibly. It examines the issue of firms that are grappling with the difficult legal and compliance issues as law requirements continue to change and the fast-paced cloud technology is developing. The chapter opens up the main concepts of cloud security, shared responsibility models, and applicable legal frameworks of the cloud system. It also covers the cloud governance approaches that are able to maintain security and compliance without undermining the agility and the flexibility of the cloud services through balancing operational flexibility and the management of the organization. The system of policy enforcing, continuous auditing and automated compliance checking will enable the detection and remedying of the risk in real-time. The chapter also emphasizes the need to combine security with compliance in DevOps processes with infrastructure-as-code and automated pipelines in order to support a compliance-by-design approach. The ability to build effective cloud security postures can be achieved through collaboration between security teams, developers, operations, business units and cloud service providers. The end of the chapter explains that a sound cloud security architecture will promote innovation in cloud based business and boost trust, regulatory confidence and long term sustainability of the business.