How identity segmentation can reduce the attack surface for healthcare organizations

One of the most effective methods to reduce the attack surface is segmentation. But, what type of segmentation should be used — network-centric or identity-centric?