Many office security incidents start with basic gaps: default passwords, unpatched software, a flat network or no usable backup. The checklist below helps you run a quick self-review.
Devices and accounts
- Keep an inventory of every networked device: computers, servers, switches, Wi-Fi access points, cameras, printers
- Change the default password of every network device and disable accounts that are no longer used
- Turn on multi-factor authentication (MFA) for email, VPN and administrator accounts
- Update firmware, operating systems and software regularly; replace devices that are out of support
Network and data
- Separate guest, camera and IoT networks from the internal network with VLANs and firewall policies
- Open only the ports and services you really need; review firewall rules regularly
- Use WPA3 or WPA2-Enterprise for the internal Wi-Fi
- Follow the 3-2-1 backup rule (three copies, two types of storage media, one copy off-site) and test restores regularly
People and processes
- Train staff to recognize phishing emails and to report incidents
- Keep firewall and server logs and watch for alerts
- Prepare an incident response procedure: who to call, how to isolate devices, which backup to restore from
Realtek provides network security solutions and managed IT services (MSP) for businesses. Contact us if you need an assessment of your systems.
