The organization physically allocates publicly accessible information system components to separate subnetworks with separate physical network interfaces.