How should shared responsibility model be designed for production in Cloud Security?

Document responsibility by service type, map every control to an owner, and review responsibility changes when moving between IaaS, PaaS, and SaaS.