Shared responsibility model
The shared responsibility model defines what the cloud provider protects and what the customer must protect. The provider secures the physical infrastructure, the network and the platform; the customer is responsible for its data, access, service configuration and backups. Having your data in Azure or AWS doesn't mean they back it up or manage your permissions.
How TecnetOne handles it: Managed Cloud Services
cloud shared responsibility, shared responsibility, cloud security responsibilities
Related terms
IoT (internet of things)
IoT (internet of things) is the set of network-connected devices that aren't traditional computers: cameras, sensors, printers, plant controllers, medical equipment or appliances. They often ship with default passwords and get few updates, so they widen a company's attack surface unless they're isolated and monitored.
IaaS, PaaS and SaaS
IaaS, PaaS and SaaS are the three cloud service models. IaaS delivers infrastructure (servers, network and storage) that you manage. PaaS delivers the platform to deploy applications without managing servers. SaaS delivers finished software, ready to use by subscription.
CSP (cloud service provider)
A CSP (cloud service provider) is a company that offers infrastructure, platforms or software over the internet on demand, such as Microsoft Azure, Amazon Web Services or Google Cloud. In the Microsoft ecosystem, CSP also names the authorized partner that sells and manages those subscriptions for the customer.
SSL/TLS
TLS (Transport Layer Security) is the protocol that encrypts communication between a browser or app and a server, so no one along the way can read or alter it; SSL is its older, obsolete version, though the name is still used. It's what turns on the padlock and https on a website.
SPF, DKIM and DMARC
SPF, DKIM and DMARC are three records configured on an email domain to stop anyone from sending messages that impersonate your company. SPF lists the servers allowed to send on your behalf, DKIM signs each message to prove it wasn't altered and DMARC defines what to do with email that fails both checks. Together they protect your brand and improve delivery of your legitimate email.
Ready to put this into practice in your operation?
Tell us what you need and a TecnetOne engineer will get back to you.
Talk to an engineerTalk to an engineer
Tell us what you need and we’ll reply the same business day.