Map the trusts within existing domains/forests and keep trust relationships to a minimum. Employ network segmentation for sensitive domains.