proxmox hardening document

We are running couple of VMs in production server on a 3-node cluster using Proxmox and ceph. Now few auditors are requesting for a guideline for hardening the proxmox installations, since we are running the vms in production. We used the iso files of the Proxmox ve and Proxmox backup server...