Definition
Network Segmentation is a method of dividing network infrastructure into separate segments to control communication and reduce the Risk of Threat propagation.
Human Explanation
Instead of one large network, several smaller parts are created with controlled traffic between them.
Why it Matters
Segmentation contains security incidents and makes lateral movement between systems more difficult.
Conceptual Boundary
Segmentation is not limited to physical separation. It may also be implemented logically using VLANs or Firewalls.
Practical Perspective
A well-designed network division makes traffic easier to control and limits the consequences of incidents.