Avoiding or remediating gaps in network segmentation starts with the proper identification of every device in the environment, whether those devices are on traditional IT networks, are in the cloud, or are connected devices like OT, industrial control systems (ICS), and Industrial Internet of Things (IIoT) assets that operate outside the standard IT framework. For example, in a health care setting, security may require segmentation of Internet of Things (IoT) devices, connected medical equipment, IT assets, and OT devices like building management controls.
The next step is to assess every device to understand its firmware, software, existing vulnerabilities, risk profile, proper place within the network, and expected behavior. With that information plus continuous device activity monitoring, security teams can see which devices are communicating with segments and which are communicating outside their designated segments — a flag for security risk.