ASD ISM 1710 Secure default settings for wireless access points

The IT team should identify all wireless access points in use.

They can do this by reviewing network equipment inventories and conducting a physical inspection of areas with network coverage. This ensures that every device in use is accounted for and ready for secure configuration.

IT managers must change the default usernames and passwords on all wireless routers.

To do this, log into each device using an admin account and update the login credentials to something unique and difficult to guess. This step ensures that unauthorised users cannot easily gain access using factory-set credentials.

Network administrators should disable remote management features unless they are absolutely necessary.

They can do this via the router's settings menu. Disabling remote access reduces the risk of an external attack where network settings can be changed maliciously from outside the building.

The IT department should enable encryption protocols like WPA3 on all wireless access points.

Access the router's security settings and select the strongest available encryption to protect data transmitted over the network. This prevents eavesdroppers from intercepting wireless communications.

IT staff should regularly review and update the firmware of wireless routers.

To do this, check the manufacturer's website for firmware updates and install them as soon as they are available. Keeping firmware updated ensures that security patches are applied to protect against known vulnerabilities.