Responsibility Matrix
The shared responsibility model describes the balance of responsibility between
a customer and a cloud service provider (CSP) for implementing security in a
cloud platform.
The division of responsibility becomes more or less complicated based on
whether the service model is SaaS, PaaS, or IaaS. For example, in a SaaS model,
the CSP performs the operating system configuration and control as part of the
service offering.
In contrast, operating system security is shared between the CSP and the
customer in an IaaS model.
A responsibility matrix sets out these duties in a clear table.