A financial firm is migrating some of its services to a third-party cloud platform. When reviewing the terms of the migration, it must be clear who is responsible for the protection of physical servers and network infrastructure. According to the typical shared responsibility model for cloud security, who is accountable for this aspect?
The cloud service provider
The third-party auditors conducting regular security reviews
The financial firm's internal IT department
The application developers of the firm