WPA2 and WPA3 are security protocols for wireless networks (Wi-Fi). WPA2 uses AES encryption and has been the standard for many years. WPA3 adds further protection: improved key negotiation (SAE), forward secrecy, and resistance to offline dictionary attacks. In an ISMS, you should prefer WPA3 where infrastructure supports it. WPA2 with strong passwords remains an acceptable minimum requirement. Older protocols (WEP, WPA) are considered insecure and must no longer be used.