The National Institute of Standards and Technology (NIST) and The Department of Homeland Security (DHS)’s Industrial Control Systems Cyber Emergency Response Team (ICS-CERT) recommend segmenting corporate IT networks from ICS. NIST recommends creation of demilitarized zones (DMZs) that strictly control communications between the IT network and ICS. ICS-CERT points out that segmentation, “…protects against unwanted traffic artifacts (malicious code) from ‘bleeding’ from one network to the other.”
Clearly, network segmentation is important, and must be enforced by a strong, certified, proven, edge protection device such as Binary Armor.