Which term describes controls that are shared between the cloud provider and the client?

Which term describes controls that are shared between the cloud provider and the client?

• A. Inherited Controls
• B. Shared Controls
• C. Risk Assessment/Risk Analysis (RA)
• D. Vendor Viability

Answer: (B)

In cloud security, the idea of a shared responsibility model means some controls are done by the provider, some by the customer, and some require joint effort. Shared controls are the ones where both sides have a role and must coordinate to ensure security. This often includes governance and oversight activities like monitoring, incident response planning, and certain configuration and risk-management practices, where the provider sets up the environment and the customer applies and verifies the controls over their data and workloads. So, the term that describes controls shared between the cloud provider and the client is shared controls. The other options don’t fit because inherited controls isn’t the standard term for mutual responsibility, risk assessment is a process rather than a control type, and vendor viability concerns a supplier’s ability to operate, not how security duties are divided.