Bonus Question: Are wireless networks secured through strong encryption, access control, and periodic assessments?

Why This Matters

Wireless networks are common attack vectors. Proper encryption, authentication, and periodic security testing protect data and users from interception and rogue access.

Maturity

0 — Unaware
Open or shared wireless networks with no policy.

1 — Ad Hoc
WPA/WPA2 used without central management.

2 — Defined
Wireless policy approved; secure encryption and MFA enabled.

3 — Managed
Central controller deployed with periodic penetration testing.

4 — Integrated
Guest and corporate networks segregated; logs monitored by SOC.

5 — Optimized
Continuous wireless threat detection and auto-quarantine of rogue devices.

How to Level Up

| From → To | Actions | |—|—| | 0 → 1 |Disable open Wi-Fi; enforce WPA2/WPA3.|
| 1 → 2 |Define wireless policy and enable MFA.|
| 2 → 3 |Deploy controller and test for rogue APs.|
| 3 → 4 |Integrate logs with SIEM and separate guest access.|
| 4 → 5 |Implement automated rogue device mitigation. |

Enablers

People: Network Admin, Security Engineer
Process: Provision → Monitor → Respond
Technology: WPA3, 802.1X, wireless IDS/IPS

Evidence

Wireless policy and configurations
Test reports on rogue access points
Authentication logs

KPIs

Number of unauthorized devices detected
Percentage of access points with WPA3
Time to contain rogue AP

Low-Cost / Open-Source Options (MSME)

Common Pitfalls

Using default PSKs across devices
Lack of guest network isolation
No assessment after hardware change

Compliance Mapping