Finance and Human Resources typically need access via their own VLAN to their application servers because of the confidential nature of the information they process and store.
Third Parties are usually required to have their own segments, with different administration passwords to the main network, to avoid attacks via a compromised, less well protected, third party site, [REF].