What is Shared responsibility model (cloud)?
In short
The shared responsibility model divides security duties between a cloud provider and its customer. The provider secures the underlying cloud; the customer secures what it puts in it.
Key takeaways
- The customer's share is largest in infrastructure as a service and smallest in software as a service.
- Customers always remain responsible for their data and user access.
- Providers' assurance reports, such as System and Organization Controls (SOC) 2 reports, help customers rely on the provider's share.
Where it's tested
ISC: Information Systems Fundamentals — study notes, a five-minute revision sheet and practice questions.
Practise: 3 questions
Question 1 of 3 · 0 answered
A company migrates its accounting system to a SaaS provider. Which responsibility remains with the company?