Networking is the practice of connecting computers, servers and other devices so they can communicate and share data. It covers network design, routing, switching, addressing, segmentation and transport protocols, with security controls such as firewalls, VPNs and network access control applied to manage traffic and trust.
Networking as a security foundation
Networking is the connective layer that makes communication possible between systems, but it also defines where trust boundaries exist. For security teams, the important question is not only whether traffic can move, but how it is routed, segmented, filtered and authenticated as it crosses different zones.
That is why networking is closely tied to design choices such as segmentation, transport rules and access pathways. A flat or overly permissive network can turn ordinary connectivity into broad reachability, making later compromise easier to spread.
Core networking functions and trust boundaries
The main functions of networking, routing, switching, addressing and transport, determine how devices find each other and how traffic flows. Security depends on those functions being deliberate and controlled, because the same pathways that support business communications can also expose sensitive services if they are not constrained.
Network security controls such as firewalls, VPNs and network access control sit on top of those functions to shape trust. They do not replace the network, they define which connections are allowed, how remote access is brokered, and where untrusted traffic should be blocked or inspected.
Segmentation, exposure and control placement
Segmentation is one of the most important security uses of networking because it reduces the blast radius of compromise. Good network design separates user traffic, server traffic, administrative paths and sensitive workloads so that a single weakness does not automatically grant broad internal reach.
This also means control placement matters. If firewalls, access policies or routing rules are placed too high in the stack, they can become coarse and difficult to operate. If they are too fragmented, they can become inconsistent and create blind spots that are hard to audit.
Operational realities in modern environments
Networking is no longer limited to a single data centre or office perimeter. Cloud services, remote work, APIs, hybrid connectivity and distributed applications all add more paths, more dependencies and more opportunities for misconfiguration. The networking layer therefore has to support both connectivity and visibility.
For security practitioners, the practical challenge is to keep network design aligned with the actual workload and user model. The network should reflect business flow, not historical convenience, and it should be reviewed whenever systems, remote access patterns or trust assumptions change.
Risk and Threat Considerations
Networking risk usually comes from overexposure, weak segmentation, or trust that extends farther than intended. When attackers get a foothold, the network often becomes the path for discovery, lateral movement, and access to systems that were never meant to be directly reachable.
Failure mechanism: Flat addressing, permissive routing, weak segmentation, or misconfigured network controls can let hostile traffic move between zones with too little resistance, turning one compromise into many.
Impact: The result can be wider system compromise, easier credential capture, exposure of sensitive services, and a larger recovery burden because the attacker can move through shared connectivity rather than isolated islands.
Standards & Framework Alignment
This section maps relevant standards and security frameworks to the operational risks and controls described in this guidance.
NIST SP 800-53 Rev 5, NIST Zero Trust (SP 800-207) and CIS Controls v8 set the technical controls, while ISO/IEC 27001:2022 defines the regulatory obligations.
| Framework | Control / Reference | Relevance |
|---|---|---|
| NIST SP 800-53 Rev 5 | SC-7 — Boundary Protection | Networking security depends on controlling traffic between trust zones and interfaces. |
| AC-4 — Information Flow Enforcement | Segmentation and routing policy define what information may flow between systems. | |
| IA-3 — Device Identification and Authentication | Network access control and trusted device access depend on identifying devices before granting connectivity. | |
| Recommendation — Enforce boundary protection to restrict and inspect traffic crossing network trust zones. Apply information flow enforcement to limit permitted network paths and service reachability. Authenticate devices before granting network access or internal connectivity. | ||
| NIST Zero Trust (SP 800-207) | SP 800-207 — Zero Trust Architecture | Networking is a primary place where trust should be verified rather than assumed. |
| Recommendation — Design network access around continuous verification and least-privilege connectivity. | ||
| CIS Controls v8 | CIS-12 — Network Infrastructure Management | The term directly concerns managing network devices, flows, segmentation, and protective controls. |
| Recommendation — Inventory, configure, and monitor network infrastructure to reduce exposure and control traffic flows. | ||
| ISO/IEC 27001:2022 | A.8.20 — Network security | Networking is directly governed by controls for securing network services and communications. |
| Recommendation — Implement network security controls that protect communications and limit unauthorized access. | ||
Practitioner Guidance
Why practitioners should care: Networking decisions shape both availability and attack surface, so they should be treated as security architecture decisions rather than only infrastructure choices. A network that is easy to connect to is not automatically safe to trust.
What to watch for: Unnecessary east-west reachability, broad remote-access paths, unmanaged exceptions, and controls that exist on paper but do not match real traffic flows are all warning signs. The most useful reviews focus on where trust is granted, how it is enforced, and whether the current design still matches the environment.
Related resources from NHI Mgmt Group
Deepen Your Knowledge
Free weekly newsletter
Subscribe to the NHI & AI Identity Journal
The latest on NHI and Agentic AI security – articles, research, breaches, news and events every week.
Bonus 33% off our NHI Course when you subscribe.
Reviewed and updated by the NHIMG editorial team on November 3, 2026.
NHI Mgmt Group — the #1 independent authority on Non-Human Identity, IAM, and Agentic AI security. nhimg.org