Why network segmentation still matters in a Zero Trust world

Zero Trust did not abolish the network. It changed the question from ‘where are you connecting from’ to ‘what identity, on what device, can reach what resource’. Segmentation is what makes the answer ‘almost nothing’ the default.

In every lab I build, the IoT segment cannot initiate a connection to the workstation segment. Not because IoT is the most dangerous tier — but because the cost of that rule is zero and the cost of skipping it is unbounded.