Small and Medium Businesses (SMBs) play a crucial role in national economies and employment worldwide. As these businesses rapidly adopt technology and cloud services to stay competitive, they become prime targets for cyber criminals. SMBs are particularly more vulnerable to cyber-attacks due to limited awareness and resources for implementing cybersecurity measures. This research aims to address these challenges by providing practical guidance to SMBs on implementing Cloud Security controls. By focusing on understanding the security responsibilities as Cloud Service Consumers and targeting quick wins and easy-to-implement strategies for various aspects of cloud security, SMBs can establish a robust security posture and excel in this dynamic environment. The implementation of these strategies also facilitates the creation of a baseline for potential future compliance with Service and Organization Controls 2 (SOC 2) requirements or adherence to cybersecurity frameworks.