The old management mantra is "you can't manage what you don't measure." The mantra for security operations in a virtual environment is "you can't secure it if you can't even find it"
While we pay a lot of attention to preventing malware in our incoming traffic, we don't do much to protect other systems from our own traffic expectorations