23 CAR § 355-2008. Wireless networks

(a) This section shall address security precautions and minimum recommendations that govern wireless networks. (b) Wireless Ethernet connections. (1) Should a wireless Ethernet communication solution be adopted, then additional security precautions must be taken. (2) The current wireless Ethernet technology (Wi-Fi) is vulnerable and should not be considered secure. (3) If Wi-Fi is chosen as the communication method for your system, the following recommendations are to be considered minimum recommendations and not restrictions: (A) The wireless access point must be physically positioned in the building so that it is not easily accessible by unauthorized individuals; and (B)(i) Wireless network traffic must be secured with additional encryption to compensate for the weaknesses in Wi-Fi. (ii) The keys used to encrypt the communication through the wireless network must be stored in a secure location.