The creation of zones and the associated network segmentation form the basis for a defense-in-depth strategy. Segment into zones based on the results of the threat and risk analysis and the system conditions.