Using cloud services in an organisation is a strategic decision. If an organisation lacks a sufficient strategy for cloud use, it may, for example, choose an inappropriate cloud service or provider. The selected cloud service may not be compatible with the organisation's own IT, internal business processes, or protection needs. This can have a negative impact on business processes in organisational, technical, or financial terms. In general, an inadequate strategy for cloud use can result in the associated objectives not being achieved or the corresponding security level falling significantly.