Avaya Partner Advanced Communications System System Planner Manual

							PARTNER
® Advanced Communications System
41
Appendix A: Security Notification and Checklist
Appendix A: Security Notification and Checklist
SECURITY NOTIFICATION DOCUMENT
AVAYA Inc.
And
_______________________________________________________________
I. IntroductionThe PARTNER ACS 1600 DSL module adds the ability to make Internet connections to your business. Internet connections pose inherent risks. 
This notification, and the associated checklist, are intended to help business owners recognize and minimize those risks.
There are three separate areas of concern to be considered: the ability of an unknown internet user to access your data, the need to control access 
to router configuration tables, and the need to store router configuration values for recovery from a catastrophic failure. Those three areas of 
concern are addressed in the checklist.II. Roles and ResponsibilitiesThe purchase of a converged communications system is a complicated process involving many phases including vendor selection, equipment 
selection, design, ordering, implementation, and systems assurance testing. Throughout each of these phases, customers, manufacturers, and 
service providers each have specific roles and responsibilities.
As a manufacturer, Avaya Inc. acknowledges the following responsibilities:
 Develop a system that can provide robust barriers against fraudulent entry.
 Provide information to customers and service providers about the default state of various points of entry. When appropriate, these entry points 
will be defaulted to a secure state.
 Provide clear warnings in product documentation, and address security issues in training classes and training materials. 
The service provider must accept the following responsibilities:
 Educate the customer/purchaser on security risks in specific products and applications.
 Educate the customer/purchaser on available methods for minimizing risks, and costs associated with implementing those solutions when 
appropriate. 
						

							PARTNER
® Advanced Communications System
42
Appendix A: Security Notification and Checklist Implement customer applications in a manner that is as secure as possible, or with appropriate warnings to customers who choose to accept 
less than recommended security.
 Avoid introducing any new risks when providing maintenance or other support.
The customer must accept the following responsibilities:
 Provide the overall data network design. This might be done via expertise on the customer payroll, or might be contracted.
 Decide on the degree of security to be implemented in every application. This includes filtering and other barriers associated with data 
networking.
 Verify that the system being installed is consistent with your requirements.
 Monitor various components of your data network for abnormal or suspicious operations.
Customer Information:
Service Provider (Installation) Information:Company Name:
Customer Contacts Name:
Customer Contact Signature-Date:
Company Name:
Consultant/Installer Name:
Consultant/Installer Signature-Date: 
						

							PARTNER
® Advanced Communications System
43
Appendix A: Security Notification and Checklist
PA RT N E R
® ACS 1600 DSL Module — Security Checklist
System Administration Y/N N/A Notes 
Router Password changed from default.
Confirm switch password is secure (covered 
on another check list).Provides double security when pass-thru used.
Data Network Access Security Y/N N/A Notes 
Need for filters has been reviewed and 
appropriate work contracted/performed.The 1600 DSL module, or the Internet Service Provider, might 
provide filtering.
Need for a firewall application such as 
“ChoiceNet” has been reviewed and 
appropriate work contracted/performed.
Router Configuration Storage Y/N N/A Notes 
Router configuration tables have been stored 
outside the router (a “backup”) for recovery 
from a catastrophic failure. Note location of 
stored tables in “Notes” at right. 
						

							PARTNER
® Advanced Communications System
44
Appendix A: Security Notification and Checklist