We have developed a multi-tiered cloud security framework to facilitate cloud users’ need to match their security requirements with security provisions of cloud service providers (CSPs).Since the launch of Multi-Tiered Cloud Security Singapore standard (MTCS SS584) [1] in Oct 2013, the standard has been harmonized with several international security framework and standards [2] such as Cloud Security Alliance’s Open Certification Framework [3] and ISO/IEC 27001 [4] to enable cross-certification for greater adoption. This paper reports on research that studies the gaps in bridging MTCS and Singapore’s Healthcare IT Security Policy (HITSecP) so that CSPs who have been certified to MTCS, can know how well and best they could meet the security requirements of IT systems for healthcare industry in Singapore.