Consumers of Infrastructure as a Service (IaaS) are primarily responsible for containment, eradication, and recovery from incidents.

In IaaS, the consumer controls everything above the hypervisor layer - the guest OS, middleware, applications, and data - and therefore owns incident response at those layers. Containment (isolating affected systems), eradication (removing threats or misconfigurations), and recovery (restoring clean state) all require access and control that only the consumer possesses, since the provider has no visibility into the consumer's operating environment above the infrastructure level.

False is incorrect because the IaaS shared responsibility model explicitly assigns OS-level and above incident response duties to the consumer, not the cloud provider.