How networks are structured, segmented, and monitored to contain threats. This topic cluster covers the core building blocks — firewalls, IDS/IPS, and DMZ architecture — and how each appears in real compliance assessments across PCI DSS, ISO 27001, and SWIFT CSP.