A network segmentation model defined by IEC 62443 where assets with similar security requirements are grouped into 'Zones,' and the communication paths between them are isolated and monitored via 'Conduits.' This structure limits the lateral spread of cyber threats across an industrial facility.