What is shared responsibility when using cloud services for CMMC Level 1?
Last updated: 6/5/2025
When using a cloud service provider (CSP) for FCI, there's a shared responsibility. The CSP is responsible for securing their infrastructure, but your organization is responsible for configuring the service securely and how your employees use it to protect FCI, in line with CMMC Level 1 practices.