PRISM level whether are security protected by Nutanix itself or require external security solution

PRISM is installed as appliance however, the is OS layer within it. Do we need to introduce any security software for OS layer or Nutanix itself has any security functions?
During the audit they were pointed out by auditor if it is okay to do nothing for PRISM appliance in terms of security.