HPC and AI, or shortly HPCAI, become increasingly important for both academics and industry. Many emerging types of research in biomedical, genomics, material science and nanotechnology, environmental, pharmaceutical rely heavily on the power of HPCAI for the understanding of the very large and complex problem. Moreover, many industries such as pharmaceutical, financial and banking, insurance, manufacturing, security relying more and more on advanced in HPCAI. These usually involved the processing of massive data and sometimes the connection with massive IoT devices. Thus, ensuring that the processing and data are secure is very important. The balance between flexibility, ease of use by users, and security must be achieved. This presentation shares the security issues and concern of the CIO who need to handle HPC cloud infrastructure for their organization. Some of the general practices and guidelines will be discussed.