Segmenting OT networks from corporate networks to limit the attack surface and isolate potential threats, ensuring that even if one part of the network is compromised, the entire system is not.