The security responsibilities of you and your cloud service provider (CSP) vary based on your cloud environment. The shared responsibility model defines what actions each entity must perform.