# Best practices
<a name="best-practices-sec"></a>

** Infrastructure protection **
+ [ HPCSEC01-BP01 Separate HPC cluster components in different network layers ](infrastructure-protection.md#hpcsec01-bp01)
+ [ HPCSEC01-BP02 Control traffic flow within your HPC cluster ](infrastructure-protection.md#hpcsec01-bp02)

** Data protection **
+ [ HPCSEC02-BP01 Enforce encryption at rest in your HPC environment ](data-protection.md#hpcsec02-bp01)
+ [ HPCSEC02-BP02 Enforce encryption in transit in your HPC environment ](data-protection.md#hpcsec02-bp02)

**Topics**
+ [Infrastructure protection](infrastructure-protection.md)
+ [Data protection](data-protection.md)