Protecting your systemsChapter 10

Cloud and SaaS: who protects what?

Shared responsibility, misconfigurations, identities and MFA, logging and sovereignty: how to secure your use of cloud and SaaS, with real cases.

Nestor
Presented byNestor
10 min readUpdated on 2 October 2026

What you will learn

  • Understand the shared responsibility model across IaaS, PaaS and SaaS
  • Recognise the misconfigurations behind the biggest cloud data leaks
  • Protect cloud identities with MFA and least privilege
  • Switch on and retain the logs that reveal an intrusion
  • Place SecNumCloud, the CLOUD Act and the Data Act in your choice of provider

Free chapter with your account

Chapter 1 is free to read. Chapters 2 to 21, like the Junior, Senior and Expert levels of the Cyber Quiz, are free too: all you need is a free KrakenShield account with a confirmed email address.

Checking your access…

From theory to practice

So how does your system measure up?

Create your account and get an A+ to F grade for your domains’ encryption in minutes, with every finding explained and the fix to apply.

Run the audit from your account: an A+ to F grade for your domains’ encryption in minutes, with every finding explained and the fix to apply.

Belinda

Contact us

A question, a project, a partnership? Write to us: the team answers by email, usually within one business day.

Your details are only used to answer you. Do not include passwords or vulnerability details.