Network segmentation divides a network into isolated zones so that a breach in one zone cannot spread freely to others. At minimum, every Malaysian organisation should maintain separate network segments for: corporate users (staff workstations), servers and databases, guest WiFi, OT and IoT devices (CCTV, printers, access control), and management interfaces (switches, routers, firewalls). Without segmentation, a malware infection on a staff laptop can reach your database server in seconds.