The division of operational technology (OT) networks into controlled zones with restricted communication paths between them. It contains cyber incidents and protects critical control assets from less-trusted systems.