THREAT‑WATCH
Glossary
Network Segmentation
Dividing a network into smaller, isolated zones so that a breach in one segment can't automatically spread to others.
A flat, unsegmented network lets an attacker who compromises one device move freely to reach anything else connected to it. Segmentation restricts that lateral movement by placing barriers, such as firewalls or VLANs, between zones (like separating guest Wi-Fi, office IT, and production OT systems), so a compromise in one zone stays contained rather than spreading network-wide.