Firewall always on
With only the ports you need open.
Network Configuration
A badly configured router or Wi-Fi network can undo every other security measure. Getting the network set up properly is one of the main Cyber Essentials controls.
Every device reaches the internet through a router, and larger offices also use managed switches. If that equipment is set up badly, it can leave a route into your network for anyone who looks.
Think of a router like a house. You need doors and windows to get in and out, but you lock them and give keys only to people you trust. A router's ports are the windows; leaving unnecessary ones open is like leaving windows unlocked.
What a secure network needs
Admin passwords changed
No default router passwords, and admin access restricted.
Firmware kept current
Routers, switches and access points updated when fixes are released.
Separate guest network
Visitors and untrusted devices kept away from staff systems.
VLANs
Departments or device types separated on their own network segments.
Strong Wi-Fi encryption
WPA3 where devices support it, and strong unique Wi-Fi passwords.
Choosing the right equipment
Good settings need good equipment. Business-grade gateways and access points, such as Ubiquiti UniFi, combined with managed switches, make a network far easier to secure and to manage remotely. They cost more than a home router, but it is a one-off cost that pays back in fewer problems.
Do not overlook Wi-Fi
Phones, laptops, TVs and smart devices all connect by Wi-Fi, which makes it one of the most common ways into a network. Separate networks, strong encryption and up-to-date access points close most of the gaps. See business Wi-Fi.
Questions we're asked
Is our ISP's router good enough?
For a very small office it may be, if it is kept updated and set up properly. Most businesses benefit from a business-grade gateway with a proper firewall and separate networks.
Want this done for your business?
We put these controls in place for small and medium businesses, and keep them there. Tell us how your business works.
See also
Related services
Protecting Company Data
What UK GDPR and the Data Protection Act 2018 require of a small business, what the fines are, and the practical steps that protect client d
User Access Control
Role-based access control for small businesses: staff see only the data their job needs. Meets UK GDPR and Cyber Essentials access control r
Hardware Security
Secure business laptops, phones and tablets: encryption, two-factor sign-in, password managers and device management, for UK GDPR and Cyber