The Shared Responsibility Model in ServiceNow clearly delineates responsibilities between the cloud service provider (ServiceNow) and the customer. ServiceNow manages the infrastructure, including the physical data centers, networking, hardware, and media disposal and destruction, ensuring proper security of the underlying platform. Hence, Media disposal and destruction and Infrastructure management fall under the provider's responsibility.
The customer is responsible for their data, including backup and restore, access management (authentication and authorization), and encryption configuration on their data. While ServiceNow provides encryption capabilities, the customer must configure and manage encryption keys and access controls.
This model is critical for maintaining security and compliance in cloud environments and is explicitly detailed in ServiceNow's official documentation and cloud security best practices.
References:
ServiceNow Trust and Security Documentation, Shared Responsibility Model section ServiceNow System Administrator Study Guide, Cloud Security Chapter ServiceNow Docs: Shared Responsibility Model