← Security+ glossary

Shared responsibility model

The division of security tasks between the cloud provider, who is responsible for the security of the infrastructure itself ('security of the cloud'), and the customer, who is responsible for the security of what they put into the cloud ('security in the cloud'). With IaaS the customer bears the most responsibility and with SaaS the least, but data, identities and access permissions are always the customer's responsibility, with misconfiguration being the most common cause of cloud breaches.

All Security+ guides →