Shared responsibility · Question 11 of 12
A company stores customer data in cloud storage that is accidentally publicly readable. A security researcher finds the data. Who bears responsibility?
1 answer is correct. Hard
Show answer
Answer
- A The company, because it defines the access settings
Explanation
In the shared responsibility model, configuring storage and permissions lies with the customer. The provider only offers the option of storing data privately or publicly. The company must assess the incident and, if necessary, report it under the GDPR.