Title

The sites telephone switch is not frequently monitored for changing calling patterns and system uses for possible security concerns. (Cat III impact)

Discussion

Requirement: The IAO will ensure that the site’s telephone switch is frequently monitored for changing calling patterns and system uses for possible security concerns. Changing calling patterns and system uses can be an indication of telephone misuse, abuse, or even security compromise. The ISSO/IAO should ensure the sites telephone switch is frequently monitored for changing calling patterns and system uses for possible security concerns.

Check Content

Interview the IAO or SA and confirm compliance through discussion, review of site policy, diagrams, documentation, DAA approvals, etc as applicable.

Fix Text

Implement processes / procedures, generate documents, and/or adjust configuration(s) / architecture, as necessary to comply with policy.

Additional Identifiers

Rule ID: SV-8408r1_rule

Vulnerability ID: V-7922

Group Title: Switch usage is not monitored for security

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.