Shared responsibility
The division of security, operations, governance, and data-handling duties between a service provider and its customer.
Why it matters
The boundary changes across SaaS, managed AI platforms, and infrastructure services, and gaps become customer risk.
Measure it with
- Named owner by control
- Verified service terms
- Tested customer procedures
Do not assume
Using a managed or certified provider transfers every responsibility to that provider.
Sources and interpretation boundaries
Microsoft LearnAI shared responsibility modelHow customer and provider responsibilities change across SaaS, PaaS, and IaaS approaches.National Institute of Standards and TechnologySecure Software Development FrameworkOutcome-based secure software practices for preparing, protecting, producing, and responding.