Have a look at Information Security Cloud for those who are trying to find an out-of-the-box cloud Alternative that adheres to demanding security rules. Physically safeguard your servers along with your devices. Hold them in a secure location, and do not grant normal entry to this place or space. https://www.researchgate.net/publication/365308473_Development_of_Cyber_Attack_Model_for_Private_Network