A company is looking into integrating on-premise services and cloud services with a cloud service provider (CSP) using an Infrastructure as a Service (IaaS) plan. As a cloud architect works on architectural design, which of the following statements would NOT apply in this case?
NOT The company must establish separation of duties mechanisms.
NOT The provider must update the firmware and security patches of physical servers.
MAYBE The provider is responsible for the availability of the software