Do you implement network segmentation?

We have the following networks within the DESelect organization:

- The office network; to which all employees have access.

- The network running the DESelect staging (testing) services, which run on servers in the data center managed by DigitalOcean; to which all developers have access.

- The network running the DESelect production services, which run on servers in the data center managed by DigitalOcean; access is highly restricted.