Technical information

Multipoint Conferencing Unit (MCU)/Conference
Reservation and Control System (CRCS)
Issue 7 June 2001
16-47
Customer Education
System manager/administrator has
copy of Security Handbook/Toll
Fraud Overview
System security policy established
and distributed
System security policy reviewed
periodically
Security policy included in new-hire
orientation
Employees know how to detect
potential toll fraud
Employees know where to report
suspected toll fraud
Authorization codes not sequential
Remote access phone number(s)
not published
Barrier codes and passwords are
chosen to be difficult to guess
Barrier codes, passwords (including
ESM and CRCS) and authorization
codes are removed/changed when
employees are terminated
Authorization codes, account
codes, and passwords are not
written down or translated on
auto-dial buttons
HackerTracker thresholds
established
Social Engineering explained
1. If “NO” (N), provide Note reference number and explain
Table 16-17. MCU/CRCS (Continued)
Y/N
1
Note N/A
Continued on next page