An auditor asks whether shared responsibility means a fixed 50/50 split between Microsoft and the city. Which statement is accurate?
Select an answer to reveal the explanation.
Short Explanation
It is not a pizza cut down the middle forever. Move from VMs to PaaS to SaaS and Microsoft picks up more of the stack. The city's leftover slice changes with the service type.
Full Explanation
The shared responsibility model is not a fixed 50/50 division. As customers move from IaaS to PaaS to SaaS, the provider assumes more responsibility for underlying layers while customers retain duties such as data and access. Auditors should evaluate the split based on the service model in use.