Cloud computing has rapidly been adopted by various organizations, providing them with solutions that don't require their own infrastructure to handle computational demands. However, this growth comes with security vulnerabilities, as users often lack control over their confidential data within the cloud environment, leading to major concerns regarding data security, compliance, legal issues, and governance. This research proposes a comprehensive framework combining technical security methods with IT governance solutions to address these security concerns, and the framework received positive feedback when validated through interviews and comparisons with existing cloud security frameworks.