# What is the shared responsibility model in the cloud?

It is the split of security duties between the cloud provider and you, and most cloud incidents happen on your side of the line. The provider secures what it runs: data centres, hardware, the network between them and, depending on the service, the operating system and the application itself. You remain responsible for how you use it: who has accounts and with what rights, multi-factor authentication (MFA), how storage and services are configured, which data you put there, your own applications and their patches, and your backups. The line moves with the service type. With rented virtual servers you manage almost everything above the hardware; with a SaaS product such as an office suite you mainly manage identities, sharing settings and data. Read your provider's own responsibility matrix, map each item to a named owner in your company, and check it after every new service. A provider's certificates cover the provider's part, not your configuration.

FAQ: [Cloud and SaaS security](https://netsenx.com/en/faq/cloud) · https://netsenx.com/en/faq/what-is-the-shared-responsibility-model-in-the-cloud

## Read next

- https://netsenx.com/en/what-is-ndr
- https://netsenx.com/en/detect-lateral-movement-c2-beaconing
- https://netsenx.com/en/eu-data-residency

## Related questions

- [What is the difference between IaaS, PaaS and SaaS?](https://netsenx.com/en/faq/what-is-the-difference-between-iaas-paas-and-saas)
- [Does moving to the cloud make us safer?](https://netsenx.com/en/faq/does-moving-to-the-cloud-make-us-safer)
- [What does a network sensor see of our cloud and SaaS traffic?](https://netsenx.com/en/faq/what-does-a-network-sensor-see-of-cloud-traffic)
- [Can NetSenX monitor our servers in the cloud?](https://netsenx.com/en/faq/can-netsenx-monitor-our-cloud-servers)
- [How do I tell legitimate cloud traffic from an attacker's rented server?](https://netsenx.com/en/faq/how-to-tell-legitimate-cloud-traffic-from-an-attackers-server)