With cloud service providers increasingly replacing traditional corporate on-premises data centers, attorneys should understand how legal risk is allocated between their clients and CSPs. In this first installment of a two-part guest article series, Adam Cohen, counsel and managing director at TopSide Group, and Mara Conway Arenson, a privacy, compliance and cybersecurity attorney for the M365 Office Product Group at Microsoft, explain the classic spectrum of cloud services offerings, including costs, risks and the customer’s obligations. In part two, they dispel some of the myths around cloud risks and address key legal issues that arise in company-CSP relationships. See “Capital One Breach Demonstrates Risk of Overlooking Vulnerabilities When Sending Data to the Cloud” (Aug. 14, 2019).