Design hardened networks with segmentation, secure endpoints and layered defense for enterprise–level resilience