Your company is migrating from an on-premises email system to a fully managed SaaS email and collaboration platform hosted by a cloud provider. During a planning meeting, a security officer asks which responsibility will always remain with your organization regardless of the cloud service type chosen. Based on the shared responsibility model, what is the correct answer?