Shared responsibility model
- Term
- Shared responsibility model
- Exam
- CISA & CISM
- Definition
The division of security responsibilities between a cloud provider and its customer, varying by service model.
- Explained
Cloud providers and customers split security duties according to the service model. In IaaS the customer manages operating systems and applications; in SaaS mainly identities, access and configuration. Data and access are almost always the customer's responsibility.
- In practice
In IaaS the provider secures the hardware, while the customer patches the guest operating system.
- Often confused with
- Outsourcing accountability
- Exam angle
Identity, access and data are almost always the customer's responsibility.
- Related