Protect against overprivileged users with excessive rights to the platform’s encryption key management, such as AWS Key Management Service, Azure Key Vault, and GCP Cloud Key Management. Step Nine: Cover Hypervisor Network Policies Configure CIEM solutions to pay special attention to cloud admin users with access to next-generation firewalls, virtual private clouds (VPCs), VPNs, routing tables, load balancers, and network ACL policies.