← VCE Cyber Security

ISM guideline: segmentation and segregation

A rule that tells organisations to divide their network into separate zones and limit access between them, so a breach stays contained.

Part of: VCE Applied Computing - U2O2 - Cyber Security — Module 59, VCE Data Analytics - U4O2 - Cyber Security: Data Security — Module 56, ACARA Digital Technologies Years 9–10 — Networked Systems and Access Control — Module 130, WA Computer Science ATAR Year 11 — Network Communications — Module 95, WA Computer Science ATAR Year 11 — Cyber Security — Module 114

Understanding ISM guideline: segmentation and segregation in VCE Cyber Security

What it does: If the network is properly segmented, a breach in one zone doesn't spread to the rest. Placing sensitive systems in a separate zone adds an extra layer of protection around them. Dividing the network into zones is the core idea behind segmentation. Limiting access between zones stops an attacker moving freely across the network. Connecting everything together removes the protection segmentation is meant to provide.

Common mistakes: Line 1 says to merge all zones together, but segmentation means keeping zones separate. Line 1 says to allow full access to all zones, but access between zones should be limited.

Class: _____________________  ·  Name: _____________________  ·  Date: _________

Free printable worksheet with full answer key — or add this module to a class and your students practise it interactively.

🖨 Print worksheet + answer key Add ISM guideline: segmentation and segregation to a class →

This module's key terms are also in a printable crossword (Modules 51–60) and word search (Modules 41–74).

Take this worksheet further — free with Cloodit

Each concept is reinforced from every angle — learned, then applied, then tested.

Learning
Duo
Does the guideline say to divide the network into separate zones?
YesNo
Matches
Connecting every system together
↓
This removes the benefit of segmentation
Applying
Meanings
Term
ISM segmentation guideline
Meaning
A rule that tells organisations to divide their network into separate zones and limit access between them, so a breach stays contained.
Practice
zone_a = "sales"
Testing
Gaps
The network is divided into separate .
Check Answer
Spots
1Merge all zones together
2Divide network into zones

Cloodit turns curriculum-aligned coding content into journeys students work through one biome at a time.

The 'Sand Cat' badge — Precision Prowler, one of Cloodit's 106 collectible badges
Students earn collectable badges

Over 100 of them, across seven natural biomes.

Study Buddy
Students build a real study resource

Turns their work into revision material ready for Flash Cards and Exam study.

Diamond Dash — one of Cloodit's live, competitive Sprint games
Students lock in with Sprints

Live, competitive practice for the start of the lesson or a teacher-led lesson finisher.

A Cloodit certificate of achievement, ready to personalise and print
Custom printable certificates

Honour your top performers, or encourage a student who's trying hard — ready to print in seconds.

Add to class →

Quick Questions

1. Does the guideline say to divide the network into separate zones?
A. No
B. Yes ✓
Dividing the network into zones is the core idea behind segmentation.
2. Should access between zones be limited?
A. Yes ✓
B. No
Limiting access between zones stops an attacker moving freely across the network.
3. If one zone is breached, should the attack be able to spread to every other zone?
A. No ✓
B. Yes
A well-segmented network keeps a breach contained within one zone.
4. Should sensitive systems be kept in their own separate zone?
A. Yes ✓
B. No
Keeping sensitive systems apart from everything else adds an extra layer of protection.
5. Does connecting every system together follow the segmentation guideline?
A. Yes
B. No ✓
Connecting everything together removes the protection segmentation is meant to provide.

Match the Pairs

Divide the network into zones → Separates the network into distinct sections
Limit access between zones → Stops an attacker moving freely between sections
Segmentation helps contain a breach → An attack stays within just one zone
Sensitive systems should be kept in their own zone → Extra protection for the most important systems
Connecting every system together → This removes the benefit of segmentation
Giving every zone unlimited access to every other zone → This breaks the guideline - access should be limited

Key Term

ISM segmentation guideline
A rule that tells organisations to divide their network into separate zones and limit access between them, so a breach stays contained.

Fill in the Blanks

1. The network is divided into separate zones.
Hint: Type the word for the separate sections a network is divided into.
2. Segregation limits access between zones.
Hint: Type the word for what is limited between different zones.
3. If one zone is breached, the attack stays contained.
Hint: Type the word for how an attack is kept within just one zone.
4. Sensitive systems are kept in their own separate zone.
Hint: Type the word for how sensitive systems are kept apart from others.
5. Connecting every system together removes the benefit of segmentation.
Hint: Type the word for dividing a network into separate zones.

Spot the Error

Question 1
A Merge all zones together
B Divide network into zones
C Keep zones fully separate
Line A — Line 1 says to merge all zones together, but segmentation means keeping zones separate.
Question 2
A Allow full access to all zones
B Limit access between zones
C Keep zones separate
Line A — Line 1 says to allow full access to all zones, but access between zones should be limited.
Question 3
A Breach stays in one zone
B Breach spreads everywhere
C Zones limit access
Line B — Line 2 says a breach spreads everywhere, but segmentation should contain a breach to one zone.
Question 4
A Keep sensitive systems apart
B Mix sensitive systems with all
C Divide network into zones
Line B — Line 2 says to mix sensitive systems with everything, but sensitive systems should be kept in their own separate zone.
Question 5
A Zones limit access
B Breach stays contained
C Connect every system together
Line C — Line 3 says to connect every system together, but doing so removes the benefit of segmentation.

Student with a class code? Join your class →