A DMZ (short for Demilitarised Zone) is a subnetwork that contains servers and services that have to be exposed to an untrusted external network. This other network is usually the Internet, but it can be any other network that is not trusted, such as another organisations private network. The subnetwork that contains the exposed infrastructure can be physical or logical, and provides a secure border between an organisations internal network resources and the external untrusted networks.