T&S Asset Management

Lesson 2 of 5

Shared responsibility: who controls what in each service model

In the cloud, a provider runs some of the layers of a system and the financial institution runs the rest. Where the line falls depends on the service model. This lesson shows who controls which layer, what that means for security, why misconfiguration is the institution's risk, and how the split is written down and checked.

Published 13 October 2026 Members

In this lesson

  • Control is divided, responsibility is not
  • Who controls which layer
  • What the customer secures
  • Misconfiguration: the customer's share going wrong
  • Writing the split down
  • Seeing what you do not control