Groups of information services, users and information systems should be segregated in the organisation's networks.
Kyverno automates and enforces namespace-level network isolation by generating and validating `NetworkPolicies`, ensuring controlled communication within namespace.
LinuxAid automates host-level network isolation by declaratively managing iptables rules across multiple servers through Puppet, ensuring consistent, auditable, and centralized enforcement of network segregation policies across the infrastructure.
Development, staging, and production environments are logically and operationally separated.