Understanding your responsibilities when using CIS

Learn about the management responsibilities and terms and conditions that you have when you use IBM Cloud® Internet Services. For a high-level view of the service types in IBM Cloud® and the breakdown of responsibilities between the customer and IBM for each type, see Shared responsibilities for IBM Cloud offerings.

Review the following sections for the specific responsibilities for you and for IBM when you use IBM Cloud Internet Services. For the overall terms of use, see IBM Cloud® Terms and Notices.

Incident and operations management

Responsibilities for incident and operations
Task	IBM Responsibilities	Your responsibilities
Availability	IBM Cloud Internet Services provides high availability through multi-zone region deployment and automatic failover between different regions in case of a region-wide failure.
Monitoring and ongoing operation of production environments	IBM Cloud Internet Services provides continuous around the clock operational monitoring and coverage by on-call personnel with minimal response times.
Deployments and cluster management	New features, updates, and bug fixes are continuously delivered as needed in a manner transparent to the customer. Maintenance with client impact is scheduled in advance with notifications posted to the IBM Cloud® status page.	Set preferences to receive email notifications. Monitor the IBM Cloud® status page for general announcements.
Incident management	Unplanned incidents with customer impact are communicated using the CIE process.	Impacted customers can obtain a report about the incident upon request.

Change management

Responsibilities for change management
Task	IBM Responsibilities	Your responsibilities
Updates, fixes, and new features	IBM Cloud Internet Services provides regular updates and bug fixes, as well as new features following a continuous delivery model in a manner transparent to the customer.
Updates to edge capabilities	Updates are made regularly as part of continuous delivery. IBM sends notifications for customer impacting changes.	Set preferences to receive email notifications. Monitor the IBM Cloud® status page for general announcements.

Identity and access management

Responsibilities for identity and access management
Task	IBM Responsibilities	Your responsibilities
Service and platform permissions	IBM Cloud Internet Services provides administrators a way to control access to work with an instance, domain, or subcategory.	Grant, revoke, and manage access to service instances, domains, and subcategories by using IAM, the IBM Cloud Internet Services Access page, or the equivalent CLI.
Security monitoring	IBM Cloud Internet Services performs regular code scans and other measures to ensure ongoing security of the service.

Security and regulation compliance

Responsibilities for security and regulation compliance
Task	IBM Responsibilities	Your Responsibilities
Maintenance of controls	IBM Cloud Internet Services maintains controls pertaining to industry standards for which it is certified.	Customer responsibility description
Security and vulnerability updates	IBM Cloud Internet Services applies security and vulnerability patches on a regular and timely schedule that is transparent to the user.
Security of instance and domain configuration		Customer is responsible for setting up and maintaining the security and compliance of their domain within IBM Cloud® Internet Services

Disaster recovery

The data for a domain in IBM Cloud® Internet Services with its properties, settings, and configuration is stored and maintained in data centers across the network of our partner, Cloudflare. IBM does not operate any data centers or maintain any customer data in the data path of the application.

Responsibilities for disaster recovery
Task	IBM Responsibilities	Your responsibilities
Backup of domain configuration data		The customer is responsible for maintaining backup copies and records pertaining to the configuration of the customer's domain. This includes DNS records, firewall rules, and any custom configuration of the customer's domain.
Recovery and verification of domain configuration	IBM is responsible for restoring the domains and configurations it manages, and for restoring full data path functionality between client and origin.	After disaster recovery, it is the customer's responsibility to verify their domain is functional, and their configuration is as expected. The customer is also responsible for the health of origins that are serving their site content.
Recovery of control path capabilities	IBM is responsible for recovering control path capabilities and making sure API, CLI, and/or UI are available to customers to manage their domains. IBM works with our partner, Cloudflare, to restore capabilities end to end.