Limiting lateral movement stops attackers from spreading across the network. Without controls, an intruder can easily move to different systems, creating lasting access.