The summary.
THE SINGLE MOST IMPORTANT STEP
Change your router's default administrator password.
Defaults for common routers are published.
THE MOST NEGLECTED
Router firmware updates. Check whether yours updates automatically; if not, check periodically.
Replace a router no longer receiving updates.
FOR WIRELESS
A strong unique password, current encryption, and a network name that does not identify your business.
A guest network for visitors, isolated from your business devices.
Change the wireless password periodically. One known to former staff and visitors is not a control.
ON PUBLIC WI-FI
Use your own mobile data for anything sensitive. A network named after a venue may not belong to it.
Disable automatic connection to open networks.
WHAT THE PADLOCK MEANS
The connection is encrypted. Not that the site is honest.
Check the address itself, and never dismiss a certificate warning.
FOR CONNECTED EQUIPMENT
Cameras and printers ship with weak defaults and are rarely updated. Change credentials and restrict access.
FOR REMOTE ACCESS
Nothing administrative exposed openly. Anything reachable is found by scanning within hours.
