We configure our network as follows:

• Firewall passes GRC test.
• Cabling secure.
• Wireless WPA.
• Strong Passwords, multiple lockout.
• Antivirus kept up to date both in version and in signatures, and certified by ICSA.
• Malwarebytes and SAS kept up to date.
• Staff scans in case of slowness or other anomaly.
• Anti-phishing and poisoned website measures.
• Remote access is only by remote access software that is encrypted and secure, using screen blanking and keyboard locking.