Isolate the Critical: How to Deploy Micro-segmentation for Operational Resiliency