The organisation should ensure that WLAN communications are used only where permitted and protected according to applicable regulatory and jurisdictional requirements.
Where no specific local WLAN requirements apply, the organisation should use recognised wireless device and wireless network security standards, to define the required controls for wireless devices, access points, authentication, encryption and network protection.