Understanding security responsibilities