Methods, systems, devices and computer program products for protecting a network by providing severable network zones

A computer implemented method of protecting a computer network, the method comprising:

• generating a plurality of compliance policies corresponding to each of a plurality of severable computer network zones in a computer network via a respective network device in each of the plurality of severable computer network zones, wherein each one of the plurality of severable computer network zones in the computer network is operable to transmit and receive data to and from at least one other of the plurality of severable computer network zones in the computer network and wherein there are a plurality of intra-network communication connections through which ones of the plurality of severable computer network zones in the computer network transmit and receive data to and from other ones of the plurality of severable computer network zones in the computer network;
• detecting non-compliant network activity in a first zone of the plurality of severable computer network zones in the computer network via a first network device in the first zone;
• and
• responsive to detecting the non-compliant network activity in the first zone of the plurality of severable computer network zones in the computer network via the first network device, isolating, via the first network device, the first zone from other ones of the plurality of severable computer network zones by disconnecting ones of the plurality of intra-network communication connections that are between the first zone of the plurality of severable computer network zones in the computer network and other ones of the plurality of severable computer network zones in the computer network.