1.2.1 - Software as a Service: The cloud provider is responsible for nearly all security, since the cloud user can only access and manage their use of the application, and can’t alter how the application works.

D. Cloud Provider In the SaaS model, the cloud provider is responsible for managing and securing the underlying infrastructure, including the network, servers, storage, and physical data centers. They are also responsible for implementing security measures at the platform level, such as access controls, authentication mechanisms, and data encryption. The cloud provider ensures the availability, scalability, and reliability of the SaaS application, as well as the protection of customer data stored within the service. They employ various security measures to safeguard against threats and vulnerabilities that could impact the SaaS environment.