Has your organization implemented network segmentation that separates different trust boundaries and platform types, with controlled communications between segments?

Network segmentation involves dividing your network infrastructure into distinct zones based on security requirements, data sensitivity, and functional purposes. This includes separating IT networks from operational technology (OT), IoT devices, guest networks, and other specialized environments, with firewall rules or access controls that permit only necessary traffic between segments. Proper segmentation limits the potential impact of security breaches by containing them within a single segment rather than allowing lateral movement throughout the entire network. Evidence of compliance could include network architecture diagrams showing segmentation boundaries, firewall rule documentation that defines permitted cross-segment communications, and configuration screenshots of network devices implementing the segmentation controls.