Discuss at least four (4) best practices for IT infrastructure security policies in domains other than the User Domain.