The division of security duties between provider and customer, misunderstanding of which causes breaches.