Small Business Network Security Checklist

A practical firewall, Wi-Fi, VPN, remote access, and documentation checklist for small businesses in Beaverton, Hillsboro, and the Portland Metro area.

Use this checklist to review common network security areas before small issues turn into bigger problems. It is designed for business owners, office managers, nonprofits, churches, dental offices, medical offices, accounting firms, and professional service businesses that want a clearer view of their network security.

Book a 20-Minute Consultation Start with the $497 Security Checkup

Important Disclaimer

This checklist is not a technical audit, penetration test, or compliance certification. It is a practical starting point to help small businesses identify common network security areas that may need attention. No system can prevent every security issue, but reviewing these areas can help reduce risk, improve visibility, and support better technology decisions.

Firewall Rules & Remote Access

Your firewall is one of the most important parts of your business network. It controls what traffic is allowed in and out of your environment.

Do you know who manages your firewall? Do you know when your firewall rules were last reviewed? Are old or unused firewall rules removed? Are unnecessary ports closed to the internet? Is remote access limited to authorized users only? Are vendor access rules documented and reviewed? Are VPN and remote access logs available? Is your firewall firmware/software kept current? Do you have a backup of your firewall configuration?

Warning sign: If no one can explain what your firewall rules do, it may be time for a review.

Business Wi-Fi & Guest Wi-Fi

Business Wi-Fi should be reliable, secure, and separated properly. Guest Wi-Fi should not have access to internal business devices.

Is guest Wi-Fi separated from staff/business Wi-Fi? Can guests access printers, file shares, servers, or business systems? Is your Wi-Fi password strong and not widely shared? Do former employees or vendors still know the Wi-Fi password? Are business devices separated from guest and IoT devices? Is your Wi-Fi using modern encryption such as WPA2 or WPA3? Are access points placed for good coverage and performance? Do you know who can make changes to the Wi-Fi settings?

Warning sign: If guest Wi-Fi and office computers are on the same network, your business may have unnecessary exposure.

VPN & Remote Work

Remote access is convenient, but it must be controlled. VPN and remote-work access should be reviewed regularly.

Do you know who currently has VPN or remote access? Are inactive users removed from VPN access? Is multi-factor authentication enabled where possible? Are VPN permissions limited to what users actually need? Are remote access logs reviewed? Are shared VPN accounts avoided? Are vendor remote access accounts documented? Are remote-work devices protected with updates and endpoint security?

Warning sign: If old employees, vendors, or shared accounts still have access, your remote-access setup should be reviewed.

User Accounts & Admin Access

Not every user should have administrator rights. Access should be based on job need.

Do you know who has administrator access? Are admin accounts separate from regular user accounts? Are old employee accounts disabled or removed? Are shared admin passwords avoided? Are strong passwords required? Is multi-factor authentication used for important systems? Are vendor accounts reviewed periodically? Is access removed quickly when someone leaves the business?

Warning sign: If everyone has admin rights, the business is harder to protect and recover.

Endpoint Protection & Updates

Computers, laptops, and servers should be updated and protected. Attackers often target outdated devices.

Are business computers receiving security updates? Are laptops and desktops protected with endpoint security tools? Are operating systems still supported by the vendor? Are old or unused computers removed from the network? Are users prevented from installing risky software? Are devices encrypted where appropriate? Are lost or stolen devices covered by a response plan? Do you know which devices are connected to your network?

Warning sign: If you do not have a current list of business devices, it is difficult to know what needs protection.

Backups & Recovery Planning

Backups are only useful if they are complete, protected, and tested.

Do you know what business data is being backed up? Are backups stored separately from the main systems? Are cloud backups protected with strong access controls? Has anyone tested restoring files from backup? Are backup responsibilities documented? Are important systems included in the backup plan? Are backups protected from ransomware or accidental deletion? Do you know how long it would take to recover critical data?

Warning sign: If backups exist but no one has tested recovery, the business may not know whether recovery will actually work.

Network Documentation

Good documentation makes troubleshooting, support, and recovery much easier.

Do you have a basic network diagram? Do you know where your router, firewall, switches, and access points are located? Are important passwords stored securely? Are firewall rules documented? Are internet providers, vendors, and support contacts listed? Are IP addresses, VLANs, and Wi-Fi networks documented? Is equipment warranty or support information tracked? Could someone else understand your network if the main technical person is unavailable?

Warning sign: If your network knowledge only lives in one person's head, the business has operational risk.

Vendor Access

Many businesses rely on vendors for software, phones, security cameras, websites, accounting systems, or support. Vendor access should be controlled.

Do you know which vendors have access to your systems? Is vendor access limited to what they need? Are vendor accounts reviewed periodically? Are vendor passwords unique and not shared? Is vendor remote access disabled when no longer needed? Do you know who to contact if vendor access must be removed quickly? Are vendors using secure remote access methods?

Warning sign: If vendors have permanent access but no one reviews it, your business may have unnecessary exposure.

When to Schedule a Security Checkup

Consider scheduling a professional review if any of these apply.

You are not sure what your firewall rules do. Guest Wi-Fi and staff Wi-Fi are not clearly separated. You do not know who has VPN or remote access. Former employees or vendors may still have access. Your business has grown, but the network was never redesigned. You do not have a current network diagram. Backups exist, but recovery has not been tested. You are preparing for insurance, vendor, customer, or audit-readiness questions. You want a practical list of security improvements without committing to a large project.

Need Help Reviewing Your Network?

Wolex Technologies offers a Small Business Network Security Checkup starting at $497 for businesses in Beaverton, Hillsboro, and the Portland Metro area.

The checkup can include:

✓ Firewall posture review
✓ Wi-Fi security review
✓ Guest/staff Wi-Fi separation review
✓ VPN and remote access review
✓ Basic network documentation
✓ Top prioritized recommendations
✓ 20-minute consultation to discuss next steps

Book a 20-Minute Consultation Learn About the $497 Checkup

Wolex Technologies

https://www.wolex.tech

503-427-8082

This checklist is for general awareness and planning purposes only. It does not guarantee security, compliance, or prevention of future incidents. Additional remediation, onsite work, hardware, software, monitoring, or expanded support may be quoted separately.

Ready to Secure Your Network?

Use this checklist as your starting point, then connect with our team for a professional review.

Schedule Your Consultation Today