With a variety of software and hardware services available to users, cloud computing has developed in recent years as a very influential and transformational technology. It functions as a fundamental method for sharing resources via the internet, with virtualization being essential to making this sharing of cloud resources possible. The National Institute of Standards and Technology (NIST) has described cloud computing as a concept that permits easy, on-demand network access to a shared pool of reconfigurable computing resources. With little management work or communication with the cloud provider, these resources can be quickly supplied and released. A significant amount of businesses have adopted cloud computing due to the many advantages and opportunities it provides. But the quick shift to the cloud has also given rise to security worries. Cloud computing is one of the modern technology that must to be used with caution. Cloud computing does not come with strong data privacy protections. Therefore, it is very important to ensure the confidentiality of data storage in order to protect data security. The objective of this paper is to discuss about the cloud computing models, the cloud service providers, the security and privacy issues surrounding cloud computing. Furthermore, prevention strategies and best practices for security and privacy issues in cloud computing will also be discussed in this paper.