ASD's Blueprint for Secure Cloud

Virtualisation Hardening

This page provides a template and guidance to assist organisations in documenting their approach to virtualisation hardening associated with their system(s) built on ASD's Blueprint for Secure Cloud.

Estimated reading time: 2 minutes

Due to the number of applicable controls in ASD’s Guidelines for System Hardening, guidance on system hardening has been split into its five sections for the purpose of this SSP.

Virtualisation hardening


This section of the SSP is not applicable to <SYSTEM-NAME> as it does not utilise system virtualisation and as such the requirements of this section are not directly applicable to this SSP. However, <SYSTEM-NAME> does rely on other systems and services that implement virtualisation as part of their hosting.

In particular, <SYSTEM-NAME> leverages system virtualisation components as implemented by Microsoft as part of its Microsoft 365 services. <ORGANISATION-NAME> has assessed the implementation of these as documented in Microsoft’s IRAP assessments, and available in Microsoft’s Service Trust Portal and is satisfied with their implementation as they relate to <SYSTEM-NAME>.


Organisational policies and processes implemented

If and when system virtualisation is considered for future use as part of <ORGANISATION-NAME>’s <SYSTEM-NAME>, <ORGANISATION-NAME> will assess and implement appropriate security controls in relation to its use at that time.


Technical controls implemented

No technical controls are implemented in <SYSTEM-NAME> relating to virtualisation hardening.


Security & Governance



External documentation

Do you have a suggestion on how the above page could be improved? Get in touch! ASD's Blueprint for Secure Cloud is an open source project, and we would love to get your input. Submit an issue on our GitHub, or send us an email at

Acknowledgement of Country icon

Acknowledgement of Country
We acknowledge the Traditional Owners and Custodians of Country throughout Australia and their continuing connections to land, sea and communities. We pay our respects to them, their cultures and their Elders; past, present and emerging. We also recognise Australia's First Peoples' enduring contribution to Australia's national security.

Authorised by the Australian Government, Canberra