{"id":10180,"date":"2021-03-30T05:03:11","date_gmt":"2021-03-29T19:03:11","guid":{"rendered":"https:\/\/nsrd.info\/blog\/?p=10180"},"modified":"2021-03-30T05:03:13","modified_gmt":"2021-03-29T19:03:13","slug":"data-protection-and-the-cloud-shared-responsibility-model","status":"publish","type":"post","link":"https:\/\/nsrd.info\/blog\/2021\/03\/30\/data-protection-and-the-cloud-shared-responsibility-model\/","title":{"rendered":"Data Protection and the Cloud Shared Responsibility Model"},"content":{"rendered":"\n

I promise this blog post has everything to do with data protection and the cloud shared responsibility model and nothing whatsoever to do with container ships in the Suez canal.<\/em><\/p>\n\n\n\n

You’re probably familiar with the Cloud Shared Responsibility Model<\/h2>\n\n\n\n

It seems like everyone knows the “shared responsibility model” popularised by AWS<\/a><\/strong>. Certainly, for any cloud (or even managed) service you use, there’ll be a similar model. As a reminder, it looks like this:<\/p>\n\n\n\n

\"Example:<\/a>
AWS Shared Responsibility Model<\/figcaption><\/figure>\n\n\n\n

The purpose of the model is to provide customers of cloud service companies with some scope around what they are still responsible for, even when their data is hosted on someone else’s infrastructure. While shared responsibility models are focused on security, they also serve as a good grounding point for other areas, such as data protection. After all, “Customer Data” sits squarely in the purview of “Customer” responsibility, right?<\/p>\n\n\n\n

But the Shared Responsibility Model Lies When it Comes to Data Protection<\/h2>\n\n\n\n

The shared responsibility model only gets you so far with data protection, however. Yes, customers have to be responsible for their data \u2013 it’s clearly shown in the model. And I 100% agree with this: any business making use of the public cloud is responsible for its data in the public cloud.<\/p>\n\n\n\n

Imagine, if you will for a moment, a car that takes petrol (‘gasoline’, if you use USA-centric terminology for fuel). If your manufacturer produced a ‘shared responsibility model’ for vehicular ownership, putting petrol in the car<\/em> would be pretty high on the list of customer responsibilities.<\/p>\n\n\n\t

\n\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\t\t