Cloud: mastering what you delegate

The cloud has become the default foundation of organisations' IT, and that is real progress: elasticity, availability, managed services that few companies could run on their own. But delegating your infrastructure does not delegate your responsibility. The shared responsibility model is often poorly understood: the provider secures the foundation, but access configuration, data encryption, identity management and monitoring remain the customer's job. Most incidents in the cloud do not come from a flaw in the provider, but from ordinary mistakes: a storage bucket left open, permissions that are too broad, an access key exposed in code. On top of this come deeper issues: where is the data really stored, which law is it subject to, and would we know how to change provider or keep operating if access were cut off? Mastering what you delegate means mapping your dependencies, hardening configurations, keeping a hand on your identities and your data, and anticipating reversibility rather than suffering it. This guide brings together the analyses on cloud and digital sovereignty to help you benefit from these services without giving up control.