I could speak of classification, truly ensuring that information stored on these servers has the proper classification types ??? for example, in the case of government agencies, there should be no Top Secret, Secret, FOUO or other information disseminated on the publicly accessible servers (but an explanation of those controls would also be like writing a book).