Access to management functions or administrative consoles for systems hosting virtualized systems are restricted to personnel based upon the principle of least privilege and supported through technical controls. Management ports of virtual machines should be protected with just-in-time network access control 3.0.0