You are designing the network approach for a new internal application that will handle sensitive employee and operational data. Before implementation starts, you need a clear segmentation model so the application can communicate only with the systems it actually needs, while still being practical for engineering and operations teams to support.
If you were designing a network for a new internal application, how would you segment the traffic?