[Reading time: 22 seconds]

If you use a cloud-based service (e.g. any SaaS solution; Microsoft 365; Google Workspace; SalesForce; Dynamics CRM; Zoho; PipeDrive; HubSpot; etc):

It usually means you will be able to benefit from the security expertise of the cloud service provider.

But did you know that they are only responsible for managing some elements of this?

You’re still responsible for managing some of the security elements too.

It’s called the “Shared Responsibility Model”.


In other words:

Using the cloud may reduce your security responsibilities.

But it doesn’t eliminate them.


So what?

If you think using the cloud means someone else is managing your cyber security:

You need to get your head out of the clouds.