Cloud Security Is On You: The Microsoft 365 Shared Responsibility Model

Cloud Security - 365 Shared Responsibility Model

More and more businesses are using cloud services like Microsoft 365 (MS 365). But many don’t realize that the burden of securing their cloud is on their shoulders. It’s called the shared responsibility model. Here is what it means for your business, along with a free checklist you can download to improve your cloud security.

The Shared Responsibility Model of the Cloud

It sounds like complex business jargon, but the shared responsibility model is very simple: It outlines what your cloud services provider IS and IS NOT responsible for. On the NOT list? You guessed it — cyber security. While the cloud is a necessary and valuable tool for modern business, don’t go into it with blind faith that what’s in the cloud is safe. Just like if you bought a computer or other hardware, the job of securing your data on those devices is your responsibility — not the computer manufacturer’s.

Cloud Security Is On You

This is not just a Microsoft 365 model — it’s used across the industry. Cloud service providers are not responsible for protecting your information. Your cloud data security is on you. As an example, Microsoft 365 does NOT:

  • Protect your data in the case of an app outage. They take many measures to keep 365 up and running, but if there’s an outage your data may be lost… and Microsoft is not liable for this. You need to back up your cloud data with a third-party application.
  • Retain data after user account termination. Let’s say an employee leaves the company and you, understandably, decommission that user’s account on Microsoft 365. Microsoft stores the information within that account for 90 days, after which it is permanently lost.  Another reason why backups are critical. 

Cloud backups are not your only responsibility. Microsoft 365 has a variety of security features, but they need to be configured by each business. Check out the 20 critical controls we recommend in our Microsoft 365 Security Checklist.

Download the Checklist

SWAT Systems SWAT Bot

The SWAT Bot

At SWAT Systems, we are always learning about cyber issues, technology and processes that matter to your business. When we create content and articles together, the SWAT Bot is our way of sharing news from all our team to you.

Read Next

Is Your Cloud Raining Data?

Download the Microsoft 365 Security Checklist

Don’t count on your cloud services provider to keep your data safe — that’s your responsibility. Surprised? Review your Microsoft 365 or other cloud services agreements. It’s there in black and white. You must ensure your cloud security. This simple and easy checklist can help.

Get The Checklist

Become a SWAT Insider


Join the SWAT Systems community and get important IT insights and trends from our team of pros each month. You'll learn ways to solve common problems and keep IT operations running smoothly.