Sound approach considering data classification and network segregation. We tend to think of risk from the outside but different levels of data and asset classification require different approaches to network security As an example, network segmentation is used to isolate Internet of Things (IoT) device access (Young, 2016). What other criteria would influence network segmentation? Does virtualization play a role?