 SDP incorporates the principal of segmentation into the Enforcement Layer.Segmentation divides a network into compartments that have different security characteristics.Based upon segment requirements, security controls are established for threat containment and recovery.