Concur & Successfactor SaaS shared responsibility

Dear Experts,

May I seek your assistance to advice and/or show me where I can find the graph or pictorial representation of Succcessfactor & Concur SaaS responsibility for CSP, entity etc? I am trying to let me management understand that under SaaS, data security is under entity or the subscriber and not the CSP but I need to find a concrete picture to show them that is indeed coming from SAP.