vCloud-based services are focused on business users, enabling them to request new services directly via the service catalog. Orchestration is critical to such automation and should have an API to communicate with external systems. Orchestration adds flexibility in a vCloud. With flexibility comes a requirement to add controls so that there are no security risks or exposure for the organization. Because the orchestration workflows have access rights to multiple systems, the orchestration workflow code needs to be protected. Encryption controls such as Set Digital Rights management need to be enabled while moving workflow code packages within servers. Access to the orchestration servers must be limited. VMware recommends that the COE exclusively control and manage access on these servers.