What is Network Segmentation?

Network Segmentation

Network segmentation involves dividing a computer network into smaller, distinct subnetworks, or "segments," to improve security and performance.

Each segment can have its own security controls, and communication between segments can be restricted to minimise the spread of threats like malware or unauthorised access. For example, sensitive systems (such as payment processing) may be isolated from less secure or publicly accessible systems.

Network segmentation helps contain security incidents, reduces the attack surface, and limits lateral movement of attackers within a network after a breach.