network segmentation testing

PCI DSS treats network segmentation as a control you must prove, not assume. Here is what segmentation testing covers, how often you need it, and what auditors expect to see.