Watch this video on YouTube
Among the options provided, who should bear the MAIN responsibility for evaluating the security risk linked to a contracted cloud provider?