Shared security responsibility model