In reply to Diego Hernandez.

Hi Diego – good question!

By “flat” we mean that an organization is applying the same security policy generically, i.e. across the board regardless of location within the network topology, type of data, and/or type of application.