Skip to content

Micro-Segmentation

What is Micro-Segmentation?

A security technique that divides a network into small, isolated segments with individual security policies to limit lateral movement and contain breaches.

Information Security

Frameworks that govern micro-segmentation

ISO 27001:2022View framework →NIST Cybersecurity Framework 2.0View framework →CIS Controls v8View framework →

What the standards actually require on micro-segmentation

Requirements naming micro-segmentation across 5 standards, quoted from the control text.

NIST SP 800-2071 control

Where workload to workload control is the primary concern, deploy micro segmentation that places each resource or small group of resources behind its own gateway. Use software defined controls rather than relying on VLAN topology.

SP800-207-4.2 · Micro Segmentation Deployment →
ATO Digital Service Provider (DSP) Operational Security Framework1 control

DSPs encrypt data stored for tax, accounting, payroll, business registry and superannuation transactions, including personally identifiable information, at the disk, container, application or database level, or by partial encryption at block, field or column l...

ato-digital-service-provider-dsp-operational-security-framework::SEC.EAR · Encryption at rest of in-scope data, or the four compensating controls →
CISA Zero Trust Maturity Model1 control

Move from perimeter-based segmentation to micro-segmentation enforced by identity and policy.

ZTMM-NET-1 · Network Segmentation →
HKMA TM-G-11 control

HKMA TM-G-1 Information Security Programme. Comprehensive technical + administrative + physical security controls. (1) INFORMATION SECURITY PROGRAMME (TM-G-1.6.1) - documented + Board-approved information security programme + governance + roles + ISMS-style al...

HKMA-TMG1-InfoSec-Access-PAM-Network-Crypto-DLP-Endpoint · TM-G-1 Information Security Programme + Access + PAM + Network + Crypto + DLP + Vulnerability + Endpoint →
IACS Recommendation No. 194 - Cybersecurity Controls for Existing Ships1 control

Segment shipboard OT from other zones with firewalls or equivalent security devices able to monitor network traffic, alert in real time, and separate IT from OT, the crew zone from the rest and, where applicable, OT systems from each other (east-west micro-seg...

iacs-recommendation-no-194-cybersecurity-controls-for-existing-ships::C2 · Control 2: Network protection (UR E26 4.2.1 and 4.2.2) →

Questions people ask about micro-segmentation

What is Micro-Segmentation?
A security technique that divides a network into small, isolated segments with individual security policies to limit lateral movement and contain breaches.
Why is Micro-Segmentation important for compliance?
Micro-Segmentation is a key concept in Information Security. Understanding micro-segmentation helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 1,016 frameworks with 316K cross-framework control mappings.
Which compliance frameworks address Micro-Segmentation?
Micro-Segmentation appears in the requirement text of NIST SP 800-207, ATO Digital Service Provider (DSP) Operational Security Framework, CISA Zero Trust Maturity Model, HKMA TM-G-1, IACS Recommendation No. 194 - Cybersecurity Controls for Existing Ships. Across these standards we have identified 5 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Micro-Segmentation?
Explore our compliance framework pages to see how micro-segmentation applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 1,016 frameworks.

See how Micro-Segmentation applies across compliance frameworks

Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.

Explore on Platform
Written and maintained by Gerard Blokdyk, The Art of Service.