Network security checklist for small offices

Most small office networks grow by accident. A router goes in, then a few more devices, then CCTV, then a guest password shared with everyone — and nobody ever steps back to check whether the whole thing is secure. Usually it isn't. This is a practical, no-jargon checklist to fix that, without needing an enterprise budget.

1. Separate your networks

The single most important item. On most small office networks, everything sits together — staff PCs, guest phones, CCTV, accounting — so any compromised device can reach everything. Fix it by separating traffic:

• Guest WiFi on its own network, so visitors' devices never touch your business systems.
• Business systems (computers, shared files, accounting) on their own segment.
• CCTV and IoT devices isolated on yet another, since cheap connected devices are a common weak point.

This separation (using VLANs) means a problem in one area can't spread to the others. It's the highest-value change most offices can make.

2. Use a real firewall

The router your ISP provided is built to be cheap and get you online — not to protect a business. A proper business firewall gives you real control: it enforces the network separation above, filters traffic, and gives you visibility into what's happening. For anything beyond a couple of people, it's worth it. See our networking page for how we specify these.

3. Secure your WiFi properly

• Use WPA2 or WPA3 encryption — never an open or WEP network.
• Set a strong WiFi password, and change it whenever someone with access leaves.
• Run a separate guest network so visitors never get your main password.
• Rename the default network name and change the router's default admin password — those defaults are public knowledge.

4. Lock down access

• Change every default admin password on routers, switches, and the firewall.
• Give staff only the access their role needs, not blanket access to everything.
• Remove access promptly when someone leaves — same day, not eventually.

5. Keep firmware and devices updated

Routers, switches, and firewalls run software that gets security fixes — and that almost nobody updates. Out-of-date network hardware is a common way in. Keep firmware current, and replace hardware that's too old to receive updates at all.

6. Protect the physical side too

Network security isn't only digital. A network cabinet or router sitting in the open, where anyone can plug in or reset it, is a gap. Keep network hardware in a secure spot, and don't leave live network ports accessible in public areas like a reception waiting room.

7. Back up, because security can still fail

No network is perfectly secure, so assume something will eventually get through and plan for it. Automated, off-site backups mean even a successful ransomware attack is recoverable. This overlaps with the basics in our cybersecurity basics for small business guide — network security and backups work together, not separately.

Run through it honestly

Go down this list for your own office and mark what's actually in place. Most small offices find they're missing the first item — network separation — and often several others. None of it is expensive to fix; it's mostly setup and discipline.

If you'd rather have someone check it properly, we run a network review that goes through all of this and gives you a prioritised, plain-language list of what to fix. WhatsApp us to set one up.