Cloud applications operate on a shared responsibility model, which means that the cloud provider will have a certain level of security, but the customer also bears a level of responsibility for settings. Misconfigured cloud storage applications can expose data to the open Internet.