Avaya Site Administration Reference
106
Top 11 tips to help prevent toll fraud
An important role for every administrator is to manage the security of their phone system.
You need to make every effort to ensure that your phone system is not open to toll fraud.
Toll fraud is the unauthorized use of telephone features and services and the theft of long
distance service. When toll fraud occurs, your company is responsible for charges.
For more information
For more information on system security and preventing toll fraud, we recommend you
obtain the BCS Products Security Handbook and use it often.
Security Alert:
If you are located in the USA and you suspect toll fraud, call the Toll Fraud
Helpline at 1-800-643-2353.
Tip:
If your organization has not yet completed the Service Agreement Indemnity
Enhancement Certification, we highly recommend that you call the Security
Hotline at the World-class Customer Service Center (1 800 643-2353) and ask
how to become certified. When you complete this certification and administer
your DEFINITY system according to Avaya’s fraud prevention requirements,
Avaya will indemnify your organization for charges associated with toll fraud.
You can reduce your company’s risk of toll fraud by following a few important guidelines.
1 Protect system administration from unauthorized access.
Make sure all system administration and maintenance logins are secure. Change
your passwords frequently.
2 Deny unauthorized remote access.
If you do not use remote access, disable all its related features. If you use remote
access, require barrier codes and set your authorization codes, if applicable, at the
maximum length. Also, change these codes frequently.
3 Restrict individual ability to make international calls.
Set up class of restriction groups to allow only certain people to call international
numbers required for your business.
4 Protect access to information stored in voice mail.
Require passwords for access to voice mailboxes. Use complicated passwords and
change the passwords regularly.
5 Deny any transfer from a voice mail system to a dial tone.
Place restrictions on the ports that allow access to and from your voice mail system.
Activate "secure transfer" features in voice mail systems.
6 Use system software to intelligently control call routing.
Set up your system to control how each call is handled or routed. If possible, use
time-of-day routing to limit the use of your system during off hours.
7 Place protection on systems that ask callers to dial digits.
Restrict certain users’ access to dial tone. Restrict the digit combinations dialed at
prompts.
Comentarios a estos manuales