Switch Audit

 

  Switch Auditing from is designed to combat abuse of your system from within [call barring]  and from the outside world [hacking]. The aim of the audit it to identify the areas of concern and produce an action plan.

 

 

 

 

badly programmed / managed systems are routinely found by . The common problems are where system users can make unauthorised calls. This is often from bad management: an example would be not  keeping up with the code changes where a user is barred from premium rate calls. The problem is that  he is barred from the old code [0898] not the new code of 09.

Another common fault - usually bad programming - is the ability of a user to bypass barring. He is barred from std numbers yet, if he uses 121 or 141, before the outside number: he can call anywhere he chooses.

There are many, many more ways for staff to bypass any barring: an audit by is a way of tackling this.

 

 

an audit by is a way of combating the financially disastrous impact that can be made by the hacker. has dealt with sites that have lost up to £3000 per day from criminal hacking. Usually taking place out of hours this 'commercial' exploitation of outward dialling routes involves calls to overseas locations on massive scale. One site was targeted over a week-end and suffered call charges of over £10000

 

 

criminal hacking in the UK is not a sophisticated process involving whiz kids or nerds hacking in vi a pc. In the UK, DDI number ranges are 'leaked' together with switch type to 'operators' who will find an outbound route from the switch. Once tested and proved the required number sequences to gain access to international destinations will be issued to 'members' of a syndicate or to a 'call centre'. The switch will be blitzed and calls will not cease until the route is removed. Occasional usage which can remain undetected [phreaking] is not common - where it does exist it is usually staff or someone with a relationship to the site.

 

 
   

RAS hacking is extremely rare yet is the route most managers seem obsessed with. This is the first door shuts!

  an audit will tackle issues such as passcodes, RAS admin, system admin & switch usage. Procedures and routines will be established catering for safe admin and to combat issues arising from disgruntled staff and bad maintainers.  
    the audit  takes a close look at the hacker's favourites: VoiceMail and Freephone access
  post audit , the client would decide which operational routines and switch changes would be suitable for his particular business. Most changes can be implemented by

 

 
 

as with many services & facilities offered by , the audit can be tailored to client's particular needs and encompass related areas, such as call routing & handling

Specific items dealt with by an audit  would include:
  • DISA
  • networking [inter-office]
  • DDI
  • networks [PTO and alternate carriers]
  •  ARS
  • LCR
  • Routing
  • number management [freephone, premium rate]
  • voicemail
  • extension / device usage
  • system features
  • switch management
  • system access
  • admin practices

 

  the audit  is available to clients as part of their support package and to any business as a switch service. lead-times are as per the support package or, to non clients, within 30 days - start to complete. the audit may involve a number of personnel reflecting the switch and its packages [voicemail, acd etc]. the audit is restricted to systems of a certain type and size because many switches do not warrant the expense. on multi site networks all switches would be examined.

 

 

RAS Control

clients can benefit from RAS Control where, upon notification or via our on site equipment telling our support centre,  switch routes, services and facilities can be remotely altered  or closed down.

 

 

on-going

clients can have a quarterly audit service which aims to continue monitoring the switch and usage to prevent abuse.

 

 
     

 

 

 
 
 
ver 19 09.10.2007                                   ©sjg 2000-07 all rights reserved