Topic starter
12/07/2026 12:17 pm
TL;DR: CISA’s new microsegmentation guidance says segmentation should be applied early, across IT, OT, ICS, IoT, cloud, on-premise and hybrid environments, and tied to contextual signals such as identity, device posture and behaviour, according to Zero Networks. The practical shift is from treating segmentation as an advanced hardening project to treating it as a core containment control that changes Zero Trust design and governance.
Editorial analysis by NHI Mgmt Group, based on content published by Zero Networks: “CISA Guidance Confirms: Microsegmentation Is Foundational for Zero Trust”.
Key questions
Q: How should security teams use microsegmentation with zero trust?
A: Security teams should use zero trust to control whether an identity can access a resource and microsegmentation to control how far that identity can move after access is granted.
Q: Why do microsegmentation programs improve Zero Trust outcomes?
A: Because Zero Trust depends on continuously limiting implicit trust, and segmentation enforces that limit close to the asset.
Q: What breaks when internal networks still trust everything inside the perimeter?
A: A single compromised identity, workload or endpoint can pivot to adjacent systems with little resistance.
Practitioner guidance
- Map internal trust zones Document where east-west traffic still flows without business need and turn those paths into explicit policy zones.
- Bind segmentation to identity signals Use identity, device posture and behavioural context as inputs to segmentation decisions where the platform supports it.
- Prioritise containment for high-value assets Start with systems whose compromise would create the biggest internal movement opportunity, including management planes and shared services.
Bottom line: Microsegmentation is shifting from an advanced network project to a core Zero Trust containment control.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
12/07/2026 12:31 pm
Microsegmentation is now an identity-governance problem as much as a network problem. CISA’s guidance matters because it ties segmentation decisions to identity, device posture and behaviour, which means access governance is no longer confined to login and entitlement review. Once internal trust becomes policy-driven, IAM and network control begin to converge around the same question: what should be reachable right now? Practitioners should treat segmentation as part of the authorisation model, not a separate afterthought.
A few things that frame the scale:
- 90% of IT leaders say properly managing NHIs is essential for a successful zero-trust implementation, according to the Ultimate Guide to NHIs.
A question worth separating out:
Q: How do teams know if microsegmentation is actually working?
A: Microsegmentation is working when a compromised workload cannot reach anything outside its explicit policy boundary. The best signal is not the existence of a segmentation design, but the reduction in reachable assets after compromise. If east-west traffic still flows broadly, the control is not changing attacker economics.
👉 Read our full editorial: CISA confirms microsegmentation is foundational to zero trust