Skip to content

Network Segmentation

What is Network Segmentation?

The practice of dividing a computer network into smaller subnetworks to improve security and performance. Segmentation limits the blast radius of security incidents and restricts access to sensitive resources.

Information Security

Terms that appear alongside network segmentation

Each of these is named in at least one of the same controls as network segmentation. The number is how many controls name both.

Frameworks that govern network segmentation

ISO 27001:2022View framework →NIST Cybersecurity Framework 2.0View framework →CIS Controls v8View framework →

What the standards actually require on network segmentation

Requirements naming network segmentation across 6 standards, quoted from the control text.

IEC 624434 controls

The asset owner shall segment wireless networks from wired IACS zones so that wireless access passes through a controlled conduit.

iec-62443::NET 2.2 · Wireless network segmentation →
CISA Zero Trust Maturity Model2 controls

Move from perimeter-based segmentation to micro-segmentation enforced by identity and policy.

ZTMM-NET-1 · Network Segmentation →
IAEA Nuclear Security Series - Computer Security at Nuclear Facilities (NSS-17-T Rev 1)2 controls

NSS-17 + NSS-42-G require facility computer security architecture organised by Computer Security Zones (CSZs) implementing IAEA zone model.

IAEA-NSS17-Architecture-Zones-DefenceInDepth-Segmentation · IAEA NSS-17 - Computer Security Architecture + Zone Model + Defence in Depth + Network Segmentation + Boundary →
NIST SP 800-1902 controls

Virtual network segmentation. Control from NIST SP 800-190 framework, domain: NIST SP 800-190: Cloud Infrastructure Security.

NIST190-16 · Virtual network segmentation →
ASD Strategies to Mitigate Cyber Security Incidents1 control

Network segmentation and segregation to limit the impact of an intrusion. Deny traffic between computers unless required.

ASD37-22 · Network segmentation (Excellent) →
AWWA Cybersecurity Guidance for the Water Sector (American Water Works Association)1 control

Set policies and procedures for segmenting the network, DMZs included, according to what equipment is involved and how sensitive it is, the roles of users and the kinds of system.

awwa-cybersecurity-guidance-for-the-water-sector-american-water-works-association::SC-3 · SC-3 Network segmentation policy and DMZs →

Questions people ask about network segmentation

What is Network Segmentation?
The practice of dividing a computer network into smaller subnetworks to improve security and performance. Segmentation limits the blast radius of security incidents and restricts access to sensitive resources.
Why is Network Segmentation important for compliance?
Network Segmentation is a key concept in Information Security. Understanding network segmentation helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 1,016 frameworks with 316K cross-framework control mappings.
Which compliance frameworks address Network Segmentation?
Network Segmentation appears in the requirement text of IEC 62443, CISA Zero Trust Maturity Model, IAEA Nuclear Security Series - Computer Security at Nuclear Facilities (NSS-17-T Rev 1), NIST SP 800-190, ASD Strategies to Mitigate Cyber Security Incidents. Across these standards we have identified 12 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Network Segmentation?
Explore our compliance framework pages to see how network segmentation applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 1,016 frameworks.

See how Network Segmentation applies across compliance frameworks

Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.

Explore on Platform
Written and maintained by Gerard Blokdyk, The Art of Service.