A good exercise for any security admin is to map your security domains or zones. The idea is that a map of the inputs and outputs of your organization’s data pathways will give you a clearer idea of the users, gateways, systems, and data that you are trying to secure. If you manage an organization of any decent size or complexity, your diagram will look as complicated and convoluted as any you’ve ever seen in your life. To defend appropriately, you must create virtual security domains.”]
Source: https://www.csoonline.com/article/2630707/map-out-your-zone-defense.html