Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
WPA or WPA2 can be leveraged using pre-shared keys. Other common techniques such as mac-address association filtering and broadcast-key rotation in addition to standard IOS hardening would make sense.
Note that in a failure scenario, if both switches were EMI, a failure of the primary could be fully recovered with the exception of the possibly dead ports on the former master. In other words, the second switch upon seeing the master fail, could ta...