Cloud Shared Responsibility Model

The cloud has all the answers doesn't it? One might think that way from all the advertising out there. However, not all cloud services are the same. Just because you are using cloud services does not mean you comply with applicable cyber security regulations. If your dealing with data types such as controlled unclassified information (CUI), you may need a different cloud solution then offered for other less sensitive data types. It is vital that you read the fine print and understand exactly what you are getting.

The other thing to be aware of is that the cloud often does not do everything for you. Cloud services often operate on a shared responsibility model. There are things relating to cyber that the cloud provider will do for you. However, there are also things that the provider will expect you to do for yourself. It is important to understand exactly what the cloud provider does versus what you need to take ownership of and do for yourself to maintain your security posture with cloud services.