Topic starter
10/07/2026 9:16 pm
TL;DR: Gartner now treats microsegmentation as a foundational Zero Trust control because hybrid, cloud, containerised, and OT environments change faster than static segmentation can govern, leaving containment gaps once an attacker gains a foothold, according to Illumio. The practical shift is from perimeter thinking to workload-level enforcement that limits spread, not just entry.
Editorial analysis by NHI Mgmt Group, based on content published by Illumio: “Gartner® Competitive Landscape for Network Security Microsegmentation: Why We Believe It's a Foundational Zero Trust Control”.
Key questions
Q: What breaks when organisations build Zero Trust without microsegmentation?
A: Without microsegmentation, Zero Trust loses one of its main containment mechanisms.
Q: Why does workload segmentation make breach containment harder for attackers?
A: Workload segmentation raises attacker effort by reducing the number of reachable targets after an initial compromise.
Q: What signs show that segmentation policy is drifting out of date?
A: The clearest signs are repeated exceptions, unexplained access expansions, and policies that no longer match observed traffic.
Practitioner guidance
- Map east-west workload communications Identify the real application and service-to-service paths across cloud, container, data centre, and OT-connected environments before tightening segmentation rules.
- Move policy to the workload boundary Define allowlists between specific workloads rather than broad network zones so that containment remains effective as environments scale and change.
- Establish policy ownership and review Assign clear ownership for microsegmentation rules, including approval, exception handling, and rollback, so policy does not drift as dependencies change.
Bottom line: Microsegmentation matters because Zero Trust fails when compromise can still spread laterally inside the environment.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
10/07/2026 9:38 pm
Microsegmentation is becoming the enforcement layer that Zero Trust has always needed. Zero Trust is not a policy slogan if compromised workloads can still talk freely once they are inside the environment. The article’s core point is that containment, not perimeter denial, is what determines whether a foothold becomes a breach cascade. For identity teams, that also means workload communication policy has to be treated as part of access governance, not as a separate network afterthought.
A few things that frame the scale:
- 90% of IT leaders say properly managing NHIs is essential for a successful zero-trust implementation, according to the Ultimate Guide to NHIs.
- By 2029, 40% of enterprises that successfully implement zero trust within cloud service provider environments will rely on the advanced visibility and control capabilities offered by CNAPP solutions.
A question worth separating out:
Q: How should teams govern AI-assisted segmentation decisions?
A: Treat AI as a recommendation layer, not an autonomous control plane. Teams should require human review, transparent policy rationale, and rollback procedures for every production rule. That keeps automation useful without allowing bad data, model error, or overconfidence to harden the wrong network boundaries.
👉 Read our full editorial: Microsegmentation is becoming the control Zero Trust needs