Under the shared responsibility model, which of the following is the customer responsible for?