Micro-segmentation is a security practice that splits networks into definable zones and then uses granular policies to dictate how data and applications within those zones can be accessed and controlled. Doing so provides enhanced visibility while reducing the attack surface to a minimum, helping prevent unauthorized lateral movement.