This paper presents a study on implementinginformation technology (IT) governance policies andprocesses to cloud computing information security. IT governance is defined as a set of mechanisms designedto encourage behaviors that are consistent with the mission,strategy, and culture of the organization