Security Practices & Evidence — Planning Brief

Security controls and evidence to review

Review who manages the operating system, credentials, patches, access rules and recovery procedures. Infrastructure controls do not replace application security or your own access policies.

Physical controls
Review facility access procedures and hardware handling practices.

Operational controls
Discuss change management, monitoring, access governance and incident response.

Relevant evidence
Confirm the scope, validity and applicability of certifications directly with the provider.


Hostingard planning brief. Confirm the selected configuration, current availability, pricing and service scope in a written quotation.