# SEC05-BP01: Create network layers

## Description

Network segmentation.

## Implementation Guidance

- Public/private subnet separation
- Network tiers (web/app/data)
- Micro-segmentation for sensitive
- DMZ for external services
- Isolated environments

## Risk Level

High - Flat networks enable lateral movement.
