The shared responsibility model divides security tasks between the cloud provider and its customer. The provider secures the underlying infrastructure; the customer remains responsible for its data, its access and its configuration. The boundary varies depending on the service model (IaaS, PaaS, SaaS).