# MIDASEC01-BP01 Create a security Shared Responsibility Model
<a name="midasec01-bp01"></a>

 Define and document a customized Shared Responsibility Model (SRM) that explicitly separates the security responsibilities between cloud environment, IT, and OT stakeholders. This provides clarity when managing security across cloud, edge, and on-premises industrial assets. 

 **Desired outcome:** Manufacturing stakeholders understand their distinct responsibilities in securing the infrastructure, data, and workloads across the IT/OT boundary. 

 **Benefits of establishing this best practice:** Reduces ambiguity during audits and incidents, strengthens collaboration across IT/OT, and supports secure innovation by clarifying boundaries of responsibility. 

 **Level of risk exposed if this best practice is not established:** High 

## Implementation guidance
<a name="implementation-guidance-5"></a>

 Use the AWS Shared Responsibility Model as a foundation, then extend it to cover the specific roles and responsibilities across your IT and OT teams. 

### Implementation steps
<a name="implementation-steps-5"></a>
+  Review the AWS Shared Responsibility Model and corresponding manufacturing standards (for example, IEC 62443). 
+  Identify and document key security ownership across cloud, edge, and on-premises systems. 
+  Collaborate with IT, OT, and third-party vendors to define shared controls and data ownership boundaries. 
+  Incorporate the SRM into onboarding and compliance training for manufacturing teams. 

## Resources
<a name="resources-5"></a>

 **Related documents:** 

 [**Shared Responsibility Model**](https://aws.amazon.com/compliance/shared-responsibility-model/) 

 [**AWS Security Foundations**](https://docs.aws.amazon.com/wellarchitected/latest/security-pillar/security-foundations.html) 

 [**Amazon IoT**](https://aws.amazon.com/iot/)