How often should we change the office WiFi password, can former employees still connect

we found out that access remained active on wifi because we forgot to remove the person who left. now we chage it every 3 months

I went through the same thing.

Thanks for posting. Taking notes for two weeks yields better results than a six-month estimate.

Good luck with that.

I've been down this road, let me tell you. When we decide without measuring we always end up in the same place.

This is my opinion, I'm not claiming it's absolute truth.

Let's separate the concepts, they're getting mixed up. Processes without records never improve, because you don't know what to fix.

I'm also curious if anyone does it differently.

To get into the details: An automated scan report is not the same as a penetration test.

Correct me if I'm wrong.

There's a part I don't understand. If you don't write this down from the start, it leads to arguments later.

i didn't know that. most time waste accumlates in tasks waiting for approval.

i'm also curious if anyone does it differently.

thanks, this was very helpfl but hasty decisions become decisions you have to fix six months later.

don't hesitate to ask; those who don't ask always pay more but i mean just leaving this note, it might be useful.

We need to make a distinction here. Security isn't absolute; it's about making attacks not worth the effort.

I went through the same thing two years ago. If you get three different answers on a topic, the question was asked wrong.

This is my opinion, I'm not claiming it's absolute truth.

Let me write how it's done in practice. If it's your first time, start small; scaling comes later.

Correct me if I'm wrong.

Im curious too. Hasty decisions become decisions you have to fix six months later.

Im also curious if anyone does it differently.

I've been dealing with this for a long time. Taking notes for two weeks yields better results than a six-month estimate.

I'm also curious if anyone does it differently.

I'm writing this so you don't make the same mistake. Just because everyone does it doesn't mean it's right.

Having backups accessible on the same network and with the same identity makes them part of the target. Hope this helps.

You're right.

Let me write how it's done in practice. An untested backup is not a backup.

Don't hesitate to ask; those who don't ask always pay more. Proven by experience.

Correct in theory, but it doesn't work that way in practice. If permission and scope aren't in writing, don't start that test.

This is my opinion, I'm not claiming it's absolute truth.