4 essential things for securing your office infrastructure

Following a few simple security criteria can prevent many of the situations that put both the company’s data and the smooth running of its infrastructure at risk.

These measures are fairly easy to implement and don’t involve high costs either. Here are the four basic ones, updated for 2026.

1. A secure wireless network and a separate network for visitors

Although the recommendation is to connect workstations to the network by cable, there usually aren’t enough network sockets available, so every company also has wireless connections. For minimal security, it’s absolutely mandatory for the office network to be secured (connecting requires a password) and for the encryption type to be WPA3 or, for older devices, WPA2 with AES. The old protocols, WEP and WPA, no longer offer real protection.

Also, it isn’t a good idea to keep the password that comes preset on the device (and is written on its back), or the router’s admin password. Use a custom one, long and complex, and update the router’s firmware regularly.

Visitors and clients shouldn’t use the main network either, because that would give them access to the company’s entire infrastructure. Ideally, there should be a separate network for visitors, used only by people from outside the company. All modern routers let you set up a guest network, and it’s easy to configure.

The detailed steps are in our article on how to secure the office wireless network.

2. Long, unique passwords and two-step verification

Weak or reused passwords are a huge security gap. The current recommendation is for every account to have a long, unique password, randomly generated and kept in a password manager. Password managers have a built-in generator, so there’s no longer any need for separate password-generating websites.

Besides the password, turn on two-step verification for email, VPN and remote access, for administrator accounts and for cloud applications. Even if a password falls into attackers’ hands, the account stays protected without the second factor. You’ll find some practical rules in our article on creating secure passwords.

3. Antivirus on workstations and up-to-date software

Protecting workstations with an antivirus solution is absolutely crucial, given the large number of malicious emails that land in the inbox. It’s so easy for workstations to be compromised (sometimes opening an attachment is enough) that protection solutions have become indispensable for companies. For businesses, the most suitable are centrally managed solutions that also detect suspicious behavior (EDR), not just viruses that are already known.

Updates are just as important. Windows 10 went out of support on October 14, 2025: computers still running it need to be moved to Windows 11 or replaced, and until then they can receive paid Extended Security Updates (ESU). The steps are in our article on the free upgrade to Windows 11.

4. Backup for the key parts of your infrastructure

Both backup applications and storage media (cloud or local) have become affordable, so there’s no excuse for not having a backup policy. If an important workstation or server is compromised and there’s no backup, recovering the lost data (in the best case) is much slower than restoring a copy.

With ransomware infections, encrypted data is very rarely recovered without a clean backup copy. That’s why at least one copy must be kept offline or in storage that can’t be modified, and restores must be tested regularly. You’ll find a complete plan in our backup strategy guide, and the version we manage for you is Backup as a Service.

For companies covered by NIS2 (in Romania, GEO 155/2024), multi-factor authentication and backup management are actually among the security measures required by law.

RezolvIT places great value on security and implements these measures for its clients as part of its IT security service. If you want to find out where your company stands, request a free IT audit.