An information security manager is concerned about the organization’s increasing reliance on cloud-based services, particularly the risks associated with shared responsibility for security. What should the manager prioritize to mitigate this emerging risk?