There is a shared responsibility model for cloud security. Your cloud hosting provider is not on the hook for compliance or security – you are. Many security breaches are due to over-reliance on vendor security for recent breaches. Organizations should depend on their vendor for availability, but understand and execute their own security and compliance obligations.