Wireless was not designed with security as a forethought. The original wireless security standard was the Wired Equivalent Privacy (WEP) protocol. WEP was designed only to provide the same privacy afforded to a user on a wired network. Although this offered some level of protection, wireless networks do not end at the organization’s exterior walls. Wireless signals can extend to the parking lot, the street, or even a neighboring business. The IS auditor should look closely at wireless systems.

ISACA specifies six threats that are of the most concern to individuals who examine the security
of wireless systems:
. Device theft
. Hackers/wackers
. Theft of service
. Malicious code