A security architect is designing a network for a company adopting the Zero Trust model. Instead of relying on a single trusted internal network zone, they want to divide the network into many small isolated segments so that if one workload is compromised, an attacker cannot freely move laterally to reach other systems. Which Zero Trust practice does this design represent?