Evolution of the Shared Responsibility Model to Shared Fate
This IDC Perspective examines the evolution of the shared responsibility model (SRM) to shared fate. In what IDC now considers the third wave of the SRM, referred to as shared fate or shared destiny, this evolved SRM implies that cloud service providers (SPs) will not only continue to secure their part of the SRM but also increase aid for organizations to do their part.IDC's Shared Infrastructure Model brings us to the beginning of the SRM evolution. Vendor examples of embedded security for shared fate and the nondigital-native and digital-native buyer personas preferences are explored. Advice for the technology buyer includes a discussion on SRM influencers, cloud SRM best practices, cyberinsurance and SRM, and generative AI and SRM."There should be a holistic approach to the shared responsibility model — There is no one size fits all. For example, a cloud migration best practice must take into consideration the user, the cloud service provider, and marketplace vendors. Following this path will reduce complexity when it comes time to architecting security as it may negate the need to create multiple security architectures," said Philip Bues, research manager, IDC Cloud Security. "The third wave of the SRM and its evolution to shared fate is not just theoretical. There are a number of very real examples that can be cited. Users in the third wave realize the unique value contributed by the cloud service provider."
Please Note: Extended description available upon request.
Executive Snapshot
Situation Overview
How Has the SRM Changed Over Time?
Vendor Examples of Embedded Security for Shared Fate
AWS
Google
IBM
Intel
Microsoft
Oracle
Advice for the Technology Buyer
SRM Influencers
Cloud SRM Best Practices
Cyberinsurance and the SRM
AWS
Google Cloud
Microsoft Azure
What Are Some of the Big Mistakes Made in the Cloud?