Telecommunications Security Review

Service Description

The CTF Specialists Telecommunications Security Review is an in-depth analysis of the security aspects of a client's telephone system, including any voice mail, auto attendant or other ancillary equipment. The review applies to all brands of customer premise equipment (CPE), regardless of manufacturer and service provider(s).

A trained professional will conduct an on-site review of the system(s) and of the particular office's policies and procedures concerning related security issues. The reviewer will utilize a comprehensive checklist, developed by CTF Specialists, to determine:

1) the location's potential as a hacker target

2) its security weaknesses

3) recommendations.

In most cases, the client will be asked if it wishes to have its service personnel (or its vendor's) available to answer questions about configurations and to provide printouts. A written report is provided to the client, which also includes general recommendations for the reviewed site.

The following procedure is followed:

Set up and conduct interview with telecommunications manager and service vendor (if necessary)

• Complete security checklist
• Review system configuration (print out of switch programming)
• Verify information by conducting tests (i.e., attempt transfer from voice mail to outside line)

Perform physical inspection of facilities

• Switch room access
• Information security
• Building access

Recommendations Report

• Discuss current security measures
• List all security issues
• Provide basic recommendations to resolve security issues
• Provide product pricing (if required) for hardware / software solutions

The entire process covers approximately 3-5 days, taking into consideration scheduling conflicts and other unforeseen situations which might delay performance of any of the steps listed above.