It’s still beta but, vmware has released a document covering security and hardening guidelines.
vsphere-hardening-guide-april-2010