"Groups of information services, users and information systems shall be segregated in the organization’s networks."[1]

Network segregation can help separate systems and data to help enforce access controls limit the transfer of data and prevent malware from spreading throughout the organization. It is advisable to separate networks that process different categories of data for example a network that processes sensitive information should be separate from the organization's guest network.