Since the question context is a cloud service environment without specifying the model, it's important to choose a task that's universally in the customer's purview. Patch management for applications and ensuring the security of the client's data are responsibilities that generally fall to the customer, regardless of the cloud service model they are using. The cloud provider is commonly responsible for the physical infrastructure, but responsibility for application-level security measures, including secure coding practices, remains with the customer.