According to our textbook,Effective Cybersecurity: A Guide to Using Best Practices and
Standards, traffic securitu is based on the usual mechanisms for encryption and
authentication. All traffic should be encrypted and travel by secure means, such as
SSL or IP security (IPsec). Virtual private networks (VPNs) can be configured so that
all traffic between a mobile device and the organization's nwtowrk is via a VPN.
Some security/mitigation risks and assoicated with VPNs are as follows:
Insufficient policies, traning, and awareness - wireless security controls must
include policies and user awareness training specifically for wireless access which
include procedufres regarding uses of wireless devices and an understanding of
relevant risks.
Access constraints - A wireless access point transmits, at regular intervals, a
signal containing is Service Set Identifier (SSID). Countermeasures include
enabling device security features, change default settings, such as default SSIDs
set by the manufacturer, and track empliyees who have WLANs at home or at a
remote site.
