The shared responsibility model delineates the responsibilities between the cloud service provider (CSP) and the customer. In infrastructure-as-a-service (IaaS) models, the CSP manages the security "of" the cloud (physical infrastructure, hypervisor, etc.), while the customer is responsible for security "in" the cloud (data, applications, identity management). This model emphasizes the collaborative effort needed for a secure cloud environment.