A parks portal will run as PaaS web apps, and staff argue that nobody needs to think about security anymore. What remains a customer duty under shared responsibility for PaaS?
Select an answer to reveal the explanation.
Short Explanation
PaaS takes more of the platform off your plate, not your keys to the data. Staff still decide who gets in, how the app is configured, and how citizen data is protected. "Nobody thinks about security" is the wrong takeaway.
Full Explanation
With platform as a service, the provider manages more of the underlying platform than with IaaS, but customers still own responsibilities such as data protection, identity and access management, and application configuration. PaaS does not eliminate customer security duties. Municipal teams must still govern who can access the parks portal and how it is configured.