In the cloud, the provider is typically responsible for the security of the infrastructure, while the customer is responsible for securing their data, applications, and client-endpoints. This shared responsibility model requires customers to manage access controls, data encryption, and security configurations.