The logical or physical grouping of related industrial assets, such as boiler controls or turbine monitors, into secure zones with defined boundaries. This containment strategy prevents a security breach in one part of the plant from spreading to other critical thermal systems.