Lesson 2 of 5
Shared responsibility: who controls what in each service model
In the cloud, a provider runs some of the layers of a system and the financial institution runs the rest. Where the line falls depends on the service model. This lesson shows who controls which layer, what that means for security, why misconfiguration is the institution's risk, and how the split is written down and checked.
Published 13 October 2026 · Listen to this lesson
In this lesson
- Control is divided, responsibility is not
- Who controls which layer
- What the customer secures
- Misconfiguration: the customer's share going wrong
- Writing the split down
- Seeing what you do not control