One thing that a lot of people don’t think about is their WiFi. So, you’ve got all these devices that are coming into your office; you’ve got your iPhone, your iPad, you’ve got your android tablets, your laptops and it’s real convenient to have wireless in your office, but you’re going to want to make sure that whoever is managing that for ya’ is using WPA2, either Personal or Enterprise. I prefer enterprise and that allows you to protect, to some degree, that WiFi.
Now anytime you open up WiFi in your office, or even in your home, given enough time it is possible to hack into that. So, you’re going to want to make sure you’re rotating that password every so often. Just like your passwords on your computers.
So, be careful with your WiFi. And, this is something you can address during your risk assessment. Is it necessary to have WiFi for your employees? Is it necessary to have WiFi for your customers that are coming in? If it is, can it be segmented away from your data that’s on your network?