Watch this video on YouTube
To whom should the risk scenario relevant to a cloud service provider be assigned?