Shared Responsibility Model

Security and Compliance is a shared responsibility between Exabytes EVC and the customer. This shared model can help relieve the customer's operational burden, as Exabytes EVC operates, manages and controls the components from the host operating system and virtualisation layer down to the physical security of the facilities in which the service operates. The customer assumes responsibility for and management of the guest operating system (including updates and security patches), other associated application software, and the configuration of the firewall rules provided within Exabytes EVC. Customers should carefully consider the services they choose, as their responsibilities vary depending on the services used, the integration of those services into their IT environment, and applicable laws and regulations. The nature of this shared responsibility also provides flexibility and customer control that permits the deployment. As shown in the chart below, this differentiation of responsibility is commonly referred to as Security "of" the Cloud versus Security "in" the Cloud.

Responsibilities between customers and Cloud Service Provider (CSP)

Customer	Customer & CSP	Cloud Service Provider
Customer Data	Operating System	Networking
Software, Web Application		Data Center Security
Data Backup		Storage
Client Side Data Encryption		Compute (CPU & RAM)
Platform, Application, Identity Access and Management		Hardware Firewall
		Physical Hardware