Home > AI Solutions > Artificial Intelligence > White Papers > Dell Managed Service for Machine Learning Operations – Security Overview > Shared Responsibility Model
The Service is a shared responsibility between Dell and the customer. Dell is responsible for logically securing the management stack for the remote service and the infrastructure on which it is hosted. The customer is responsible for the physical security of all solution components deployed within their location, including the management stack infrastructure. The customer is also responsible for any other security functions, compliance with internal and external processes, policies and regulations, and industry best practices.
The customer is responsible for the security of the data that is transported, stored, analyzed, and sent to and from the ML platform, including models, algorithms, raw/analyzed data, and more.
The customer is also responsible for the network security in this Service, including the connectivity between Dell backend-managed services sites to the ML platform residing at the customer facility.
Additional customer security is for user management life cycle, access, privileges, actions, and auditing to and at the ML platform.
The overall security of this Service is achieved through the shared responsibilities of Dell and its customers. When consuming these Services, some responsibilities are transferred from the customer to Dell. The following figure illustrates the areas of responsibility between Dell and its customers.
The Services require the customer to procure their own software licenses to enable Dell to deliver the Services (“third-party software”). Customer may use a “bring your own license” (BYOL) model or, in some instances, procure the third-party software through the Dell reseller program (the latter assuming Dell can resell the applicable third-party software). The customer must also ensure that Dell has the necessary rights to manage and access the third-party software on behalf of the customer. Dell assumes no license rights, obligations, or liabilities associated with the third-party software.