Which term denotes controls that are the sole responsibility of the customer?

• A. Shared Responsibility Model
• B. Inherited Controls
• C. Customer/Client Specific Controls
• D. External Environment

Answer: (C)

In cloud setups, security responsibilities are divided between the provider and the customer. Some controls are shared or handled by the provider, while others are owned entirely by the customer. Customer/Client Specific Controls are the security measures the customer must implement and manage on their own, such as data classification, customer-managed encryption keys, and access-control policies tailored to their data and environment. This is why it’s the best fit: it directly denotes controls that are exclusively the customer's responsibility. The Shared Responsibility Model describes how duties are split between provider and customer, not which controls are solely owned by the customer; the other terms don’t convey that sole ownership.