When an organisation decides to use a cloud service, the decision usually carries many expectations. For example, employees are hoping for higher performance or greater functionality from outsourced services, while those in charge of the organisation are betting on lower costs. However, a lack of compliance management prior to cloud use can lead to expectations not being met and the service not delivering the desired added value (e.g. in terms of availability).