When defining responsibilities with a cloud computing vendor, which of the following should be regarded as a shared responsibility between user and provider?

A. Data ownership

B. Access log review

C. Application logging

D. Incident response