Episode 94: Methods to Secure Data (Part 3) (Domain 3)

In this final installment on data protection methods, we focus on segmentation and permission restrictions—two strategic approaches that limit both exposure and access. Segmentation involves dividing networks, databases, or storage environments into discrete zones or tiers, isolating sensitive information from general-purpose systems and minimizing lateral movement opportunities for attackers. This could include separating credit card data from employee records, isolating cloud workloads by function, or creating VLANs to keep administrative access apart from user access. Permission restrictions, meanwhile, apply fine-grained access control, typically based on role, job function, or contextual rules like time-of-day or location. These controls enforce the principle of least privilege, ensuring users and systems can only reach the data they are explicitly authorized to handle. Together, segmentation and permission enforcement reduce risk, simplify auditing, and contain the impact of breaches. They turn data environments from open hallways into locked, purpose-built rooms—with only the right keys available to the right people.