The Shared Responsibility Model on model 7-identify-security-incidents needs to be reviewed.

rick halsell 0 Reputation points
2024-06-16T20:51:13.32+00:00

The Shared Responsibility Model on model 7-identify-security-incidents needs to be reviewed. It looks like the SaaS model puts all of the responsibility on the vendor because everything is in regular font. Data should be italicized for the SaaS model because it's the customer's responsibility.

This question is related to the following Learning Module

Azure Training
Azure Training
Azure: A cloud computing platform and infrastructure for building, deploying and managing applications and services through a worldwide network of Microsoft-managed datacenters.Training: Instruction to develop new skills.
1,232 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. RDash 1,265 Reputation points Microsoft Vendor
    2024-06-24T10:59:09.33+00:00

    Hi rick halsell ,

    There’s quite a lot online that detail this. Funnily enough I was just watching this video which you might find useful to depict what you’re after: https://youtu.be/nWmcWB_3jE0?si=kme2PMeBF9F6PlUY In a nutshell though.

    IaaS - You’re going to be responsible for the virtual machine and its supporting components. A real example of this model that you would own as part of the shared responsibility is you are expected to update and patch Windows with the latest updates and security patches, Microsoft would not do this for you. It’s on you.

    PaaS - Azure App Service Example - You won’t need to worry about patching the OS it runs on like in IaaS or any of the underlying infrastructure. However, you will be responsible for the code you deploy and run in the app and the settings on the app (misconfigurations etc). E.g if you expose the app to the internet when you don’t need to, or you’ve enabled FTP access to the app. That’s on you.

    SaaS - mostly the data that lives within this. Think, a password in plain text in a word document that lives in your M365 tenant. Or maybe OneDrive organization settings allow external sharing to anyone. This is on you as a configuration of the apps who enabled or turned these features to less than ideal configurations.

    Hope these helped. If so, please mark as the accepted answer!

    If you find this information beneficial, please indicate your acknowledgment by clicking the "Upvote" and "Accept Answer" buttons on the post.

     

    0 comments