What should we do with old devices nobody uses any more?
Find them, decide whether each one is needed, and either update and document it or switch it off and wipe it. Old servers, forgotten NAS boxes, former employees' laptops and test machines are common entry points, because nobody updates them and their passwords are old. Walk through the office and compare what you find with your device list and the router's list of connected devices. For each device, name an owner. If nobody claims it, disconnect it for a few weeks and see whether anyone complains, then wipe it securely. Remove its accounts and firewall rules too. NetSenX's network map, on every plan, shows devices that send traffic, with first and last seen, which helps find the ones nobody remembers.