Home routers used for work
A home router connects work systems to personal devices and internet services. Review its support status, administration, Wi-Fi configuration, and any unnecessary remote access.
Infrastructure Security
Infrastructure Security
Change the default passwords on network appliances
A device may have separate credentials for administration, monitoring, support, and cloud services. Review all of them before deciding that the factory access has been removed.
Staging sites that are still open on the internet
A staging site can contain production data and powerful integration credentials. Keep its access and outbound behavior deliberately separate from the live service.
Treat domain renewal as a security control
An essential domain depends on working ownership, billing, recovery, and renewal arrangements. Check those dependencies while the service is healthy, not after it disappears.
Who should be allowed to change your DNS records
Control of DNS can affect email, websites, and other essential services. Identify the registrar, DNS host, privileged users, and applications that can change records.
Printers and cameras that still have an open admin page
An office appliance can hold credentials, send documents, and expose management features. Treat it as a managed system with an owner, support status, and limited access.
Work data on phones the company does not own
Bring-your-own-device arrangements need a clear boundary between work information and personal use. Agree what may be stored, what controls apply, and what happens on loss or departure.
What to do when a password is pasted into chat
Deleting a chat message does not invalidate a password or token that someone may have copied. Identify the credential, revoke or rotate it, and review its possible use.
Who should have administrator rights on a work laptop
Administrator access changes what software can do to a device. Limit routine privilege while giving staff a clear, workable route for approved installation and support.
What you still have to secure when you use the cloud
A managed cloud service does not remove every security responsibility from your team. Map the provider’s role and your own configuration, identities, data, and recovery duties.