Administrator's Guide

Physical security
Issue 5 October 2002 381555-233-506
14. Callers misrepresenting themselves as the “phone company,” “AT& T,”
“RBOCS,” or even known employees within your company may claim to
be testing the lines and ask to be transferred to “900,” “90,” or ask the
attendant to do “start 9 release.” This transfer reaches an outside operator,
allowing the unauthorized caller to place a long distance or international
call. Instruct your users to never transfer these calls. Do not assume that if
“trunk to trunk transfer” is blocked this cannot happen.
15. Hackers run random generator PC programs to detect dial tone. Then they
revisit those lines to break barrier codes and/or authorization codes to make
fraudulent calls or resell their services. They do this using your telephone
lines to incur the cost of the call. Frequently these call/sell operations are
conducted at public payphones located in subways, shopping malls, or
airport locations. See ‘‘QSIG to DCS TSC Gateway screen’’ on page 1085
to prevent this happening to your company.
Physical security
Physical security is your responsibility. Implement the following safeguards as an
added layer of security:
1. Unplug and secure attendant console handsets when the attendant position
is not in use.
2. Lock wiring closets and switch rooms.
3. Keep a log book register of technicians and visitors.
4. Shred all switch information or directories you discard.
5. Always demand verification of a technician or visitor by asking for a valid
I.D. badge.
6. Keep any reports that may reveal trunk access codes, screen barrier codes,
authorization codes, or password information secure.
7. Keep the attendant console and supporting documentation in an office that
is secured with a changeable combination lock. Provide the combination
only to those individuals who need to enter the office.
8. Keep any documentation pertaining to switch operation secure.
9. Label all backup tapes or flash cards with correct dates to avoid using an
outdated one when restoring data. Be sure that all backup media have the
correct generic software load.