Reference / Security
Wireless security: reduce exposure before an incident
Wireless traffic crosses a shared physical space, so security cannot rely on walls alone. A useful programme covers access points, clients, administrative accounts, the wired network behind them and the people who operate them.
Build a defensible baseline
Use a security mode appropriate to intended clients, a separate administrator credential and a documented maintenance process. Remove default accounts or settings where equipment permits it.
Separate visitors and untrusted devices from systems that hold work data or manage equipment. Inventory matters: an unknown access point, repeater or client cannot be reviewed or retired reliably.
Monitor and rehearse
Maintain approved access points, locations, network names and management ownership. Review unusual authentication failures, administrative changes and unexpected devices. Monitoring helps only when normal is known.
Prepare a response: isolate a suspected device, preserve relevant logs, change affected credentials, check configurations and restore access deliberately. Do not disable protection or repeatedly alter settings without a record.
Review administrative access
Limit management access to people and networks that need it. Remove accounts for departed operators, protect backups and review who can change radio or network settings.
Security review should include recovery: a lost administrator credential or failed update needs a controlled, documented route back to service.