The company that Alex works for is preparing to adopt a platform as a service tool for their customer relationship management needs. Alex knows that third-party vendors are responsible for some, but not all, security in a PaaS environment. Which of the following is the PaaS vendor responsible for?

PaaS vendors are responsible for the underlying service and platform, including the networks, systems, and infrastructure that it runs on, including their security. Customers are responsible for their use of the platform, including endpoints, users, and applications built on the platform, again including their security.