Best practice:
1.Key virtual networking component
2.Network isolation
3.Limit access to management plane
4.Redundant
5.Isolation between internal and external networks - create separate virtual switch with its own physical network interface cards -- never mix internal and external traffic.
Leading practices
1. Defense in Depth
2. Access control
3.Auditing / monitoring
4.Maintenance
When assessing the physical infrastructure of a CSP , consider the following
1. Legal
2.Compatibility
3.Control
4.Log data
5.Upgrades and changes,change management
6.Failover technology
7.Compliance
8.Regulations
9.Outsourcing
10.Placement of security
11.Virtualization
+ OS and app files
+ Data fluidity