Most IT auditors and security people are aware of the need to find and disconnect unauthorized access points connected to the corporate network. An equally troubling problem that is less often addressed is identifying whether or not your employees are using business assets to connect to access points that are outside of your control. We're not talking about Starbucks or McDonald's; we're talking about wireless access points that are in range from within your own building.

It's not unusual, especially in urban business environments or industrial parks to find that a large number of access points are visible to anyone in the periphery of the building. In these settings, businesses are often somewhat conscious of the need to secure access points with encryption, but unauthorized access points in another business or even private open access point can still mean trouble for you.

Visit the Show Notes for more details and the demonstrated script here: http://it-audit.sans.org/blog/2011/06/27/can-you-hear-me-now-show-notes-4