Subgroups are ordered by inclusion, a partial order, so we can draw them as a Hasse diagram: bigger subgroups higher, with a line when one sits directly inside another. This picture is called the subgroup lattice.
For $\mathbb{Z}_{n}$ the subgroups are $\langle d \rangle$ for the divisors $d$ of $n$, and $$\langle d \rangle \subseteq \langle d' \rangle \iff d' \mid d,$$ because $\langle d \rangle$ is the set of multiples of $d$. So the lattice of $\mathbb{Z}_{n}$ is the divisor diagram of $n$ turned upside down: $\langle 1 \rangle = \mathbb{Z}_{n}$ at the top, $\langle n \rangle = \{0\}$ at the bottom.
To draw it by hand, put $\{0\}$ at the bottom and climb one prime at a time: from $\langle d \rangle$ you can step up to $\langle d/p \rangle$ for each prime $p$ dividing $d$. Every edge then has index $p$, a prime, and the subgroups at each height have the same number of prime factors in their index.
Why it works
Worked example: Reading the lattice of $\mathbb{Z}_{36}$
- $\operatorname{lcm}(6, 9) = 18$, so $\langle 6 \rangle \cap \langle 9 \rangle = \langle 18 \rangle = \{0, 18\}$.
- $\gcd(6, 9) = 3$, so the smallest subgroup containing both is $\langle 3 \rangle$, of order $12$.
Answer: $\langle 18 \rangle$ and $\langle 3 \rangle$.
Worked example: Directly above
- $\langle d \rangle \supsetneq \langle 12 \rangle$ means $d$ is a proper divisor of $12$.
- Nothing lies in between when $12/d$ is prime: $d = 6$ ($12/6 = 2$) and $d = 4$ ($12/4 = 3$).
Answer: $\langle 6 \rangle$ and $\langle 4 \rangle$.
Groups that are not cyclic have richer lattices. $\mathbb{Z}_{4}$ has a single subgroup of order $2$, but $U(8) = \{1, 3, 5, 7\}$, also of order $4$, has three: $\{1, 3\}$, $\{1, 5\}$ and $\{1, 7\}$. The symmetries of a square, $D_{4}$, have ten subgroups.
Common mistake
Key idea