Security; Warranty - AT&T MERLIN LEGEND Key System Planning

Customer Support Information
Security of Your System—Preventing Toll Fraud
As a customer of a new telephone system, you should be aware that there exists an increasing problem of telephone toll fraud.
Telephone toll fraud can occur in many forms, despite the numerous efforts of telephone companies and telephone equipment
manufacturers to control it. Some individuals use electronic devices to prevent or falsify records of these calls. Others charge
calls to someone else's number by illegally using lost or stolen calling cards, billing innocent parties, clipping on to someone
else's line, and breaking into someone else's telephone equipment physically or electronically. In certain instances, unauthorized
individuals make connections to the telephone network through the use of remote access features.
The Remote Access feature of your system, if you choose to utilize it, permits off-premises callers to access the system from a
remote telephone by using an 800 number or a 7- or 10- digit telephone number. The system returns an acknowledgement
signaling the user to key in his or her authorization code, which is selected and administered by the system manager. After the
authorization code is accepted, the system returns dial tone to the user. If you do not program specific egress restrictions, the
user will be able to place any call normally dialed from a telephone associated with the system. Such an off-premises network
call is originated at, and will be billed from, the system location.
The Remote Access feature, as designed, helps the customer, through proper administration, to minimize the ability of
unauthorized persons to gain access to the network. Most commonly, phone numbers and codes are compromised when
overheard in a public location, through theft of a wallet or purse containing access information, or through carelessness (writing
codes on a piece of paper and improperly discarding it). Additionally, hackers may use a computer to 'dial" an access code and
then publish the information to other hackers. Enormous charges can be run up quickly. His the customer's responsibility to take
the appropriate steps to properly implement the features, evaluate and administer the various restriction levels, protect access
codes, and distribute access codes only to individuals who have been fully advised of the sensitive nature of the access
information.
Common carriers are required by law to collect their tariffed charges. While these charges are fraudulent charges made by
persons with criminal intent, applicable tariffs state that the customer of record is responsible for payment of all long-distance or
other network charges. AT&T cannot be responsible for such charges and will not make any allowance or give any credit for
charges that result from unauthorized access.
To minimize the risk of unauthorized access to your communications system:
Use a nonpublished Remote Access number.
Assign authorization codes randomly to users on a "need-to-have" basis, keeping a log of ALL authorized users and
assigning one code to one person.
Use random sequence authorization codes, which are less likely to be easily broken.
Deactivate all unassigned codes promptly.
Ensure that Remote Access users are aware of their responsibility to keep the telephone number and any authorization codes
secure.
When possible, restrict the off-network capability of off-premises callers, via use of Call Restrictions and Disallowed List
capabilities.
When possible, block out-of-hours calling.
Frequently monitor system call detail reports for quicker detection of any unauthorized or abnormal calling patterns.
Limit Remote Call Forward to persons on a "need-to-have" basis.
Limited Warranty and Limitation of Liability
Limited Warranty
AT&T warrants to you, the customer, that your MERLIN LEGEND Communications System will be in good working order on the
date AT&T or its authorized reseller delivers or installs the system, whichever is later ("Warranty Date"). If you notify AT&T or its
authorized reseller within one year of the Warranty Date that your system is not in good working order, AT&Twill without charge
to you repair or replace, at its option, the system components that are not in good working order. Repair or replacement parts
may be new or refurbished and will be provided on an exchange basis. If AT&T determines that your system cannot be repaired
or replaced, AT&T will remove the system and, at your option, refund the purchase price of your system, or apply the purchase
price towards the purchase of another AT&T system.
Customer Support Information
x i