- 
One Identity Safeguard for Privileged Sessions (SPS) stores sensitive data. Use a firewall and other appropriate controls to ensure that unauthorized connections cannot access it. 
- 
If possible, enable management access to SPS only from trusted networks. 
- 
Make sure that the HA interface of SPS is connected to a trusted network. 
