Network segmentation

Cut the network into smaller pieces. Segregation is the rule set between them. Flat is a gift.

Segmentation partitions a network into smaller networks. Segregation is the enforced policy of who may talk to whom, on which ports and services. ACSC treats them as a pair. One without the other is a drawing.

Crown jewels, OT, guests, and build systems should not share a broadcast domain with the intern Wi-Fi. Firewalls, identity-aware proxies, and deny-by-default between zones. Then prove it with a test, not a visio.