A delineation of security duties between service provider and customer, varying by service and deployment model.