Network & devices: checklist and advice

Last updated: 18 October 2026 · IT-Checklist editorial team · All changes

A small business network is often set up in an afternoon and never touched again. The router still runs the firmware from installation day. The printer has its factory password and guests share the Wi-Fi with the accounts department.

This topic goes through those places, in the office and at home. That includes the smart devices that are easy to forget.

Check where your business stands on network & devices

The free IT check asks you these questions. Then you see your score per topic and advice for every gap. You don't need an account.

Start the IT check →

Why this matters

Routers, NAS devices and cameras that can be reached from the internet and don't get updates are found and abused automatically. A hacked NAS is a well-known way in for ransomware.

On a flat network, an infected guest device can reach every other device. So can a vulnerable smart doorbell.

The 11 questions in this topic, with advice

Each question describes the situation you want to have. The label shows how much the measure weighs in your score. 'Do first' counts the most.

The Wi-Fi network has a strong, unique password and the default router password has been changed.
Important
Change your router's admin password, use WPA2/WPA3 and a strong Wi-Fi password that is not your company name.
Guests and private devices use a separate guest network.
Recommended
Enable a guest network on your router so visitors and smart devices cannot reach your business data.
On public Wi-Fi we only work via a VPN or mobile hotspot.
Recommended
When travelling, use a VPN or your phone's hotspot instead of open Wi-Fi in cafés or hotels.
The firmware of router, NAS and other network equipment is kept up to date.
Recommended
Enable automatic firmware updates where possible and check ageing equipment; replace devices that no longer receive updates.
Private devices used for work also meet our security requirements.
Recommended
Make agreements about working from home and personal devices (BYOD): locking, updates and encryption apply there too.
We have an up-to-date overview of all devices connected to our network.
Recommended
Check in your router or via a network scan which devices are connected and remove what you do not recognise. You cannot secure what you do not know about.
Smart devices such as cameras, printers and doorbells have their own password and receive updates.
Recommended
IoT devices are a favourite target: change default passwords, enable automatic updates and preferably connect them to the guest network.
Remote access to our network (VPN, remote desktop, NAS) is protected with MFA and limited to those who need it.
Important
Secure every form of external access with MFA and a separate account per person. Unsecured remote access is the number one entry point for ransomware.
Where useful, the network is divided into separate zones (e.g. payment systems, office workstations and smart devices separated).
Recommended
Network segmentation limits the damage of an infection: a hacked camera or till cannot reach your records. Many business routers support this with VLANs.
We have documented secure baseline configurations for servers, firewalls and cloud environments, and changes to them are checked.
Recommended
Document the secure default setting for your key systems and periodically compare the current configuration against it, so an unnoticed change stands out.
Applies to: SMEs, larger companies
We use DNS or web filtering to block access to known malicious or phishing sites.
Recommended
A DNS filter (e.g. via your router, Microsoft Defender or a service like Quad9/NextDNS) blocks known malicious domains before a click can cause damage. Often free or cheap to set up.

Where to start

Change your router's default password. Give the Wi-Fi network a long, unique password.
Turn on a separate guest network for visitors and personal devices.
Check your router, NAS, printer and cameras for firmware updates. Turn on automatic updates where you can.
Protect every form of remote access, such as VPN or remote desktop, with MFA. Only give it to people who really need it.

Common mistakes

Never changing the Wi-Fi password, not even after staff have left.
Leaving smart devices out of the inventory because they are 'not computers'.
Working on public Wi-Fi without a VPN or mobile hotspot.

Network & devices: checklist and advice

Why this matters

The 11 questions in this topic, with advice

The Wi-Fi network has a strong, unique password and the default router password has been changed.

Guests and private devices use a separate guest network.

On public Wi-Fi we only work via a VPN or mobile hotspot.

The firmware of router, NAS and other network equipment is kept up to date.

Private devices used for work also meet our security requirements.

We have an up-to-date overview of all devices connected to our network.

Smart devices such as cameras, printers and doorbells have their own password and receive updates.

Remote access to our network (VPN, remote desktop, NAS) is protected with MFA and limited to those who need it.

Where useful, the network is divided into separate zones (e.g. payment systems, office workstations and smart devices separated).

We have documented secure baseline configurations for servers, firewalls and cloud environments, and changes to them are checked.

We use DNS or web filtering to block access to known malicious or phishing sites.

Where to start

Common mistakes

Official sources

Read next