Definition
A Demilitarized Zone (DMZ) is a separated network segment for services accessible from external networks while limiting access to the internal network.
Human Explanation
A DMZ creates an intermediate zone between the Internet and an organisation's internal network.
Why it Matters
Separating public services from the internal network reduces the Risk to critical organisational Assets.
Conceptual Boundary
A DMZ does not remove the need for other controls. It is one element of a secure network architecture.
Practical Perspective
Internet-facing servers should be placed in an appropriately protected zone rather than directly inside the internal network.