Physically opens or closes connection paths to prevent unauthorised access and stop attack progression.

Separates systems and networks into controlled zones to reduce lateral movement and enforce trust boundaries.

Allows connectivity only when needed, for a defined purpose, under controlled conditions and for a limited time.

Initiates control actions when a policy, approval, schedule, incident state or supervisory override requires action.

Checks whether a request, command or approval should proceed before access, action or transfer is allowed.

Preserves critical files and records for recovery, retention, compliance, continuity and evidential integrity.

Removes persistent connections, live dependencies and inherited trust relationships that keep sensitive assets exposed.

Restricts access through identity, authority, policy, permission and operational controls.

Controls how sensitive assets move into, out of or between protected environments through approved paths.