SESK: Stuff Everyone Should Know · sesk.info/secplus-cloud-data-identity-owner
Under Microsoft's shared responsibility model, who owns and must protect your data and identities in every cloud deployment type?
The customer, always, whether on-premises, IaaS, PaaS or SaaS.
- The cloud provider
- The customer ✔
- Both equally, split 50/50
Why: Providers take on more of the stack as you move toward SaaS, but never your data or who has access to it. A leaked password or an over-shared file is still the customer's problem.
Huh, didn't know that: Microsoft says it uses the word responsibility in a governance sense: who configures, operates and monitors each control.
The cloud provider promised 99.99 percent uptime but said my weak password was 100 percent my problem.
Like this card?
References
Answer: The customer. Providers take on more of the stack as you move toward SaaS, but never your data or who has access to it. A leaked password or an over-shared file is still the customer's problem.
- Microsoft Learn: Shared responsibility in the cloud learn.microsoft.com/en-us/azure/security/fundamentals/shared-responsibility
For all cloud deployment types, you own your data and identities.
Checked 2026-10-10. - Microsoft Learn: Shared responsibility in the cloud learn.microsoft.com/en-us/azure/security/fundamentals/shared-responsibility
who is expected to configure, operate, and monitor each control
Checked 2026-10-10.
Think this answer is wrong? Tap "Challenge this answer" on the card in the game and tell us why.
More stuff everyone should know
Security & PrivacyIn which cloud service model does the customer control the operating system but not the physical hardware?Security & PrivacyA developer deploys their own app on a provider's platform without managing servers or the operating system. Which model is that?Security & PrivacyWhich cloud model describes using ready-made apps such as Microsoft 365, with the provider running nearly everything?
That's stuff everyone should know.