I'm working with a nonprofit that wants to use CiviCRM to process its donor, member, and patron personal information. Civi is CMS-based, and will only run via WordPress, Drupal, Joomla, etc.
Newb question: If I set up WordPress on localhost (on a single machine sharing wifi with other devices, but not sharing files), is that information just as secure as any other file on the computer (which is to say still vulnerable to malware and such, but generally safe from the network)?
I only have experience with WampServer, are there other, more secure options, or settings I should be aware of? Other than limiting computer access to certain users who exercise caution (vetting downloads, no personal email, strong password enforcment/2FA, etc.), is there anything else I can do to ensure the security of our sensitive information?