The shared responsibility model "is contractually and legally correct, but it doesn't ... embody the right philosophical approach for security," CISO Phil Venables said. “The shared responsibility ...