This value creation model provides guidance to the IT industry for their future development in cloud computing. Since cloud computing heavily depends on Internet infrastructure and technology, security will be a major concern to cloud computing operation. These risk factors are identified in the value model. The auditing practice is stipulated by law. In order to comply with legal requirement, auditing must be exercised in cloud computing operation. All of these concerns and requirements are included and discussed in the value creation model.