A financial firm is migrating some of its services to a third-party cloud platform. When reviewing the terms of the migration, it must be clear who is responsible for the protection of physical servers and network infrastructure. According to the typical shared responsibility model for cloud security, who is accountable for this aspect?
The third-party auditors conducting regular security reviews
The application developers of the firm
The cloud service provider
The financial firm's internal IT department