I read an article in the latest InfoSecurity magazine (an infosec trade rag by Elsevier) saying that us security professionals aren't necessarily taking the correct steps to protect our own home office networks and computers. Now as a security consultant who operates out of my own home office, I ask you how you protect your home office? What should we be doing?
Using my own environment as an example, I go to great lengths to protect my clients' source code (I'm in app security). I also use WPA2 on the router and change the password every so often to try to avoid network sniffing. I have a firewall on each computer, though maybe I don't review the logs as often as I might... and I have backups both locally and offsite. And of course the hardware itself is insured.
So, what have I missed? What would you do? What wouldn't you do? Of course, policies aren't such a good solution because there's only one of me, and I'm not about to fire him ;-)