Industry regulators and standards bodies are increasingly mandating micro-segmentation as a necessary control in company networks in order to limit the ability of attackers to move laterally. In this presentation we cover the basics of micro-segmentation, understand how effective this control is in hindering attackers, look at what has driven change in compliance requirements, and wrap up by looking at a specific mandate and how micro-segmentation can be used to achieve it.