Understanding your responsibilities when using Secrets Manager

Learn about the management responsibilities and terms and conditions that you have when you use IBM Cloud® Secrets Manager. For a high-level view of the service types in IBM Cloud® and the breakdown of responsibilities between the customer and IBM for each type, see Shared responsibilities for IBM Cloud offerings.

Review the following sections for the specific responsibilities for you and for IBM when you use Secrets Manager. For the overall terms of use, see IBM Cloud® Terms and Notices.

Incident and operations management

Incident and operations management includes tasks such as monitoring, event management, high availability, problem determination, recovery, and full state backup and recovery.

Responsibilites for incident and operations
The rows are read from left to right. The first column describes the task that the customer or IBM might be responsibility for. The second column describes IBM responsibilities for that task. The third column describes your responsibilities as the customer for that task.
	IBM Responsibilities	Your Responsibilities
Ensuring high availability	Operate Secrets Manager in accordance with IBM Cloud Public Service Level Agreements (SLAs).	Follow high availability best practices for Secrets Manager
Monitor the system	Provide integration with select third-party partnership technologies, such as IBM Cloud Logs.	Use the provided tools to review instance logs and activities.
Incident management	Provide notifications for planned maintenance, security bulletins, or unplanned outages.	Set preferences to receive emails about platform notifications, and monitor the IBM Cloud status page for general announcements.

Change management

Change management includes tasks such as deployment, configuration, upgrades, patching, configuration changes, and deletion.

Responsibilites for change management
The rows are read from left to right. The first column describes the task that the customer or IBM might be responsibility for. The second column describes IBM responsibilities for that task. The third column describes your responsibilities as the customer for that task.
	IBM Responsibilities	Your Responsibilities
Updates, fixes, and new features	IBM provides regular updates and bug fixes, as well as new features following a continuous delivery model in a manner transparent to the customer.

Identity and access management

Identity and access management includes tasks such as authentication, authorization, access control policies, and approving, granting, and revoking access.

Responsibilites for identity and access management
The rows are read from left to right. The first column describes the task that the customer or IBM might be responsibility for. The second column describes IBM responsibilities for that task. The third column describes your responsibilities as the customer for that task.
	IBM Responsibilities	Your Responsibilities
Restricting access	Provide the ability to control user access based on role.	Use Identity and Access Management (IAM) to assign access.

Security and regulation compliance

Security and regulation compliance includes tasks such as security controls implementation and compliance certification.

Responsibilites for security and regulation compliance
The rows are read from left to right. The first column describes the task that the customer or IBM might be responsibility for. The second column describes IBM responsibilities for that task. The third column describes your responsibilities as the customer for that task.
	IBM Responsibilities	Your Responsibilities
Meet security and compliance objectives	Provide a secure service that complies with key standards. For more information about data security, see How do I know that my data is safe?

Disaster recovery

Disaster recovery includes tasks such as providing dependencies on disaster recovery sites, provision disaster recovery environments, data and configuration backup, replicating data and configuration to the disaster recovery environment, and failover on disaster events.

Responsibilites for disaster recovery
The rows are read from left to right. The first column describes the task that the customer or IBM might be responsibility for. The second column describes IBM responsibilities for that task. The third column describes your responsibilities as the customer for that task.
	IBM Responsibilities	Your Responsibilities
Back up of instance configuration and secrets	Conduct backups of instance configurations and secrets	Consider a secondary instance in a different region.