The method of logically separating compute resources into groups that share common risks, supporting minimum necessary access between logical groups. This can be by application, Tenant , segment, or Community. Isolation is achieved by logical separation requiring a security boundary such as a virtual firewall.