Rather than setting a universally high security bar across all systems in the enterprise, an enterprise might segregate systems into different 'zones,'