What type of controls are fully managed by the cloud service provider?

Inherited controls refer to the security measures and protections that are in place by default within a cloud service environment, which are managed entirely by the cloud service provider. These controls include physical security at data centers, network security measures, and routine maintenance and updates that the provider implements to safeguard the infrastructure.

When organizations utilize cloud services, they benefit from these inherited controls as they do not need to invest in or manage the physical security and foundational infrastructure aspects themselves. Instead, they can focus on their own application security and data management practices. This is an important distinction, as organizations must understand which security responsibilities lie with them versus the cloud provider to ensure a robust security posture.