Question

A retail company adopts a fully managed SaaS collaboration suite for email and document sharing. During a security review, the team asks which responsibilities remain with the company rather than the cloud provider under the shared responsibility model for SaaS. Which responsibility still belongs to the company?

Accepted Answer

Managing user access, identities, and how data is shared

Answer

Patching the operating system that runs the email servers

Answer

Maintaining the physical data center hardware

Answer

Upgrading the underlying application runtime and middleware