Shared Responsibility
This is a strategic lens in cybersecurity
In cloud environments this model is vital; understand it and use it to your advantage throughout cybersecurity management.
🔍 Compliance
Shared Responsibility
It's impossible to talk about compliance without considering the three main cloud service models.
Cloud Service Models
Cloud Provider Responsibilities
Customer Responsibilities
Shared responsibility explained
The shared responsibility model defines security obligations across the different cloud service models:
-
IaaS (Infrastructure as a Service): The provider manages the physical infrastructure, network and virtualization. Customers are responsible for operating systems, applications, data and configurations.
-
PaaS (Platform as a Service): The provider extends management to include operating systems and middleware. Customers focus on applications and data with less infrastructure management burden.
-
SaaS (Software as a Service): The provider manages almost everything, including the application itself. Customers are mainly responsible for data, user access controls and compliance requirements.
As you move from IaaS to SaaS, more responsibility shifts to the cloud provider, but data protection and access management always remain the customer's responsibility.