Securing Data in the Cloud: Who is Responsible for What?