Policy Suggestion and approach for DCS SA components

We would like to apply Prevention and Detection policy for DCS SA components, Need assistance on the initial policy to start with.

Would need some expert suggestion to apply intial policies and approach to protect this DCS SA server components.

Windows
DCS SA Management Server: <Prevention Policy to be applied>
DCS SA Management Server: <Detection Policy to be applied>
DCS SA Management Console: <Prevention Policy to be applied>
DCS SA Management Console: <Detection Policy to be applied>

Linux
DCS SA Collector Server: <Prevention Policy to be applied>
DCS SA Collector Server: <Detection Policy to be applied>