Cloud security vs on-premises security, and shared responsibility for security

In a traditional on-premises environment, the organization is responsible for every layer of security: guarding the building, securing the hardware and its supply chain, patching firmware and operating systems, protecting the network, managing identities and protecting the data. Doing all of this well requires large budgets and specialist staff that many organizations do not have.