1. Purpose
This policy establishes security controls for network segmentation and segregation to mitigate security risks, prevent unauthorized access, and enhance data protection within Speak AI’s infrastructure.
2. Scope
This policy applies to all networks, systems, and devices within Speak AI’s environment, including corporate, cloud, and third-party integrated networks.
3. Network Segmentation Standards
3.1 Segmentation Principles
- Network segmentation must be implemented to isolate sensitive systems and data from general access networks.
- Internal networks must be logically and physically separated based on risk levels, business functions, and data sensitivity.
- Guest and employee networks must be segmented from production and administrative networks.
3.2 Access Controls & Monitoring
- Firewall rules must restrict traffic between network segments based on business needs.
- Multi-Factor Authentication (MFA) and least privilege principles must be enforced for access to segmented networks.
- Network traffic must be monitored for anomalies, with alerts for unauthorized access attempts.
3.3 Secure Data Flow & Connectivity
- Data flow between network segments must be controlled via approved gateways, proxies, or firewalls.
- Remote access to segmented networks must be secured with VPN and encrypted tunnels.
- Direct external access to sensitive network segments must be prohibited unless explicitly authorized.
3.4 Segmentation Testing & Validation
- Regular penetration tests and vulnerability assessments must be conducted to validate network segmentation controls.
- Network segmentation policies must be reviewed at least annually and updated to address emerging threats.
4. Compliance & Enforcement
- All systems and applications must comply with Speak AI’s Network Security Policy and Access Management Policy.
- Non-compliance with segmentation policies will result in corrective actions, including access revocation or network redesign.
5. References & Supporting Documents
- Speak AI Network Security Policy: /help/security/policies/network-security/
- Speak AI Access Management Policy: /help/security/policies/access-management/
- Speak AI Vulnerability Management Policy: /help/security/policies/vulnerability-management/
6. Contact Information
For security concerns or policy clarifications, contact success@speakai.co.
This policy is subject to periodic review and updates to align with evolving security threats and industry best practices.