Which of the following is the sole responsibility of the client organization when adopting a Software as a Service (SaaS) model?

The correct answer is B. Data classification. In a Software as a Service (SaaS) model, the sole responsibility of the client organization is data classification. The SaaS provider manages infrastructure, security, and application-level responsibilities, but the client retains responsibility for how their data is…

Submitted by fernanda_arg· Apr 18, 2026Information Security Governance

Question

Options

AInfrastructure hardening
BData classification
CHost patching
DPenetration testing

How the community answered

(19 responses)

A
5% (1)
B
89% (17)
C
5% (1)

Explanation

In a Software as a Service (SaaS) model, the sole responsibility of the client organization is data classification. The SaaS provider manages infrastructure, security, and application-level responsibilities, but the client retains responsibility for how their data is classified, managed, and secured within the application.

Topics

#SaaS#Shared Responsibility Model#Data Classification#Cloud Security

Community Discussion

No community discussion yet for this question.

Full CISM Practice