Infrastructure as a Service (IaaS) provides organizations with the highest level of control over their IT resources in the cloud. With IaaS, clients manage the operating systems, storage, deployed applications, and possibly limited control of select networking components. This level of control allows organizations to manage the data life cycle comprehensively, including data creation, storage, processing, and disposal. In contrast, PaaS and SaaS models abstract more of these controls, limiting the client's ability to manage the data life cycle directly.
Reference:ISACA CRISC Review Manual, 7th Edition, Chapter 4: Information Technology and Security, Section: Cloud Computing Models.