primary ssid with open or no wep

What type of security policy should be enforced for the users in the Guest group?