|
|
|
Switch Audit |
| |
Switch
Auditing from
is designed to combat
abuse of your system from within [call barring] and from the outside
world [hacking]. The aim of the audit it to identify the areas of concern
and produce an action plan. |
|
|
|
badly programmed / managed
systems are routinely found by
. The
common problems are where system users can make unauthorised calls. This is
often from bad management: an example would be not keeping up with the
code changes where a user is barred from premium rate calls. The problem is
that he is barred from the old code [0898] not the new code of 09.
Another common fault -
usually bad programming - is the ability of a user to bypass barring. He is
barred from std numbers yet, if he uses 121 or 141, before the outside
number: he can call anywhere he chooses.
There are many, many more
ways for staff to bypass any barring: an audit by
is a way of tackling this.
|
|
|
an audit by
is a way of combating the financially disastrous impact that can be made by
the hacker.
has dealt with sites
that have lost up to £3000
per day from criminal hacking. Usually taking place out of hours this
'commercial' exploitation of outward dialling routes involves calls to
overseas locations on massive scale. One site was targeted over a week-end
and suffered call charges of over
£10000
|
|
|
criminal
hacking in the UK is not a sophisticated process involving whiz kids or
nerds hacking in vi a pc. In the UK, DDI number ranges are 'leaked' together
with switch type to 'operators' who will find an outbound route from the
switch. Once tested and proved the required number sequences to gain access
to international destinations will be issued to 'members' of a syndicate or
to a 'call centre'. The switch will be blitzed and calls will not cease
until the route is removed. Occasional usage which can remain undetected [phreaking]
is not common - where it does exist it is usually staff or someone with a
relationship to the site.
|
|
| |
|
RAS hacking
is extremely rare yet is the route most managers seem obsessed with. This is
the first door
shuts! |
| |
an
audit will tackle issues such as passcodes, RAS admin, system admin
& switch usage. Procedures and routines will be established catering for
safe admin and to combat issues arising from disgruntled staff and bad
maintainers. |
|
| |
|
the
audit takes a close look at the hacker's
favourites: VoiceMail and Freephone access |
| |
post
audit , the client would decide which operational
routines and switch changes would be suitable for his particular business.
Most changes can be implemented by
 |
|
| |
as with many
services & facilities offered by
, the audit can be tailored to client's particular needs and
encompass related areas, such as call routing & handling |
Specific items
dealt with by an
audit
would include:
- DISA
- networking
[inter-office]
- DDI
- networks [PTO and
alternate carriers]
- ARS
- LCR
- Routing
- number management [freephone,
premium rate]
-
voicemail
-
extension / device usage
-
system features
-
switch management
-
system access
- admin
practices
|
| |
the
audit is
available to
clients as part of their support package and to any business as a
switch service. lead-times are as per the support package or, to non
clients, within 30 days - start to complete. the audit may involve a
number of
personnel reflecting the
switch and its packages [voicemail, acd etc]. the audit is restricted to
systems of a certain type and size because many switches do not warrant the
expense. on multi site networks all switches would be examined. |
|
|
 |
RAS Control
clients can benefit from
RAS
Control where, upon notification or via our on site equipment telling our
support centre, switch routes, services and facilities can be remotely
altered or closed down.
|
|
|
on-going
clients can have a quarterly audit service which aims to continue
monitoring the switch and usage to prevent abuse.
|
|
|
|
|
|