With the incredible variety of enterprise cloud services available these days, it is no wonder there is some confusion regarding the allocation of legal risk between cloud service provider and customer. The answer is not binary: neither party takes on all of the risk nor does either escape all responsibility. Instead, the parties enter into a relationship of “shared responsibility”, where the delineation of who is responsible for what will vary based on a variety of factors, for example, what services are involved, what legal authorities have jurisdiction and more. In this introduction to the shared responsibility model and its implications for legal risk, our expert presenters will lay the groundwork for counsel to develop a more nuanced approach to the legal risk calculus for enterprise clients moving to the cloud. 

Key takeaways:

• Understand why enterprise cybersecurity responsibilities don’t simply transfer to the cloud service provider;

• Learn how to approach understanding and identifying the appropriate delineation of risk and responsibility in different kinds of cloud relationships;

• Develop the ability to advise clients on how their enterprise risk management programs interact with those of the cloud service provider and what questions counsel needs to ask of each party.