Media for Operating Wi-Fi Security in large corporations

Operating Wi-Fi Security in large corporations

I am advising a large corporation on its Wi-Fi security policy and I'd be curious to hear what others have been experiencing. This corporation has multiple locations and its users are mobile. They will buy Wi-Fi from every possible manufacturer since IT decisions are decentralized.

For instance, even though WEP security is better than nothing, common sense dictate that corporations should change keys on regular basis. Therefore it requires work from IT and it is a bit complex to handle.

The objectives here are "easy deployment", "low maintenance" and "reasonable security".

I was thinking of recommending WPA with PSK for regular users and

802.11i where access to confidential data is possible. Having 2 options is simple to understand (those with kids will agree with me).

I realize that there is no "good" or "bad" answer here, it's more a matter of handling security versus the amount of IT work required to maintain Wi-Fi security and training users to use Wi-Fi.

Paul