A draft WLAN risk plan proposes to 'accept WEP forever' with no iso…

Question

A draft WLAN risk plan proposes to 'accept WEP forever' with no isolation and no executive signature. What should the plan require instead?

Accepted Answer

Reject silent perpetual WEP acceptance; require compensating isolation and documented executive residual-risk acceptance if temporary use continues. — “Accept WEP forever” with no isolation and no signature is not risk management—it is giving up in invisible ink. Either isolate and get an executive on the residual risk, or retire the crypto. Sticky notes and hidden SSIDs are not acceptance.

Answer

Hide the WEP SSID name and declare the risk closed.

Answer

Accept WEP forever as long as the PSK is written on a sticky note under the keyboard.

Answer

Replace WEP acceptance language with a promise to revisit after the next decade.

A draft WLAN risk plan proposes to 'accept WEP forever' with no isolation and no executive signature. What should the plan require instead?

Short Explanation

Full Explanation