Trust architecture

Shared Responsibility

Assign control ownership by deployment.

Scope-specific controls

Make ownership, evidence, and limitations visible.

Coordinates customer access, policy, placement, metering, federation-level evidence, service management, and settlement as defined by agreement.

Owns the stated facility, equipment, local controls, maintenance, physical access, power systems, and incident duties unless reassigned by contract.

Maintains the services, interfaces, licenses, support, security, and evidence expressly assigned to that provider.

Defines authorized users, data, workloads, configurations, decisions, approvals, retention, and customer-controlled systems and keys.

Next step

Identify the product, environment, system boundary, framework, agreement, decision, and evidence required.