The Industrial Zone should be further subdivided into enclaves or Cell Area Zones. Each Cell Area Zone will contain the systems and devices that have a common task or a mutual stake in the production process:
Cell Area Zones allow more granular security control schemes and further confine related network traffic. Defining what goes into a Cell Area Zone is often dependent on the goal of the security efforts for the entire ICS network. Sometimes, Cell Area Zones are defined by the functional areas of a production process. For example, production line 1 will be a separate Cell Area Zone, production line 2 will be another Cell ...
