A PBX Audit Checklist


This list was compiled from a brave posting made on the CISSA's mailing list and then augmented with principles from Protection and Security on the Information Superhighway .


Part D - Documentation


Check all that apply:


The following documentation is on-hand in written form and readily available to all those responsible for PBX maintenance:
All of the above listed docuemnts that you have are up-to-date and easily understood by people designated to to use them.
Customer Service Records listing the equipment are reviewed and retained by those responsible for eacxh piece of equipment and by a central responsible group.
Monthly phone bill tracking reports are generated and include exp[licit reports of substantial deviations from the previous period.
Circuit numbers are clearly marked on channel banks, CSU/DSUs, and modems.
MDFs and IDFs are clearly labeled.
Procedures for making PBX SW and HW changes are fully documented and signed checklists are used to record all changes as they are made.
There is a list of authorized contact points for all PBX-related issues.
All managers have an up-to-date list of emergency contact information for all appropriate PBX-related contacts.
3rd party calls are identified on phone bills and flagged on automated analysis.
Full call audit records are generated and kept in paper and electronic forms.
With maximum value of