NSA's Zero-Trust Guidelines Focus on Segmentation

The NSA released zero-trust network security guidance emphasizing macro- and microsegmentation, mapping data flows, and software-defined networking to limit lateral movement and enforce least-privilege access. Industry experts (including John Kindervag) note that segmentation has shifted from hardware to software approaches and requires a methodical, long-term effort, while research cited (Akamai) shows mature segmentation materially improves defense—cutting ransomware containment times by roughly 11 hours for organizations that segment most critical assets.