Lucent Technologies MERLIN LEGEND Release 7.0 Feature Reference page 831

MERLIN LEGEND Communications System Release 7.0
Feature Reference 555-670-110
A Customer Support Information
Toll Fraud Prevention
employees of Lucent Technologies or your authorized dealer. Hackers will go
through a company's trash to find directories, dialing instructions, and other
information that will enable them to break into the system. The more
knowledgeable they appear to be about the employee names, departments,
telephone numbers, and the internal procedures of your company, the more likely
it is that they will be able to trick an employee into helping them.
Preventive Measures
Take the following preventive measures to limit the risk of unauthorized access by
hackers:
Provide good physical security for the room containing your
telecommunications equipment and the room with administrative tools,
records, and system manager information. These areas should be locked
when not attended.
Provide a secure trash disposal for all sensitive information, including
telephone directories, call accounting records, or anything that may supply
information about your communications system. This trash should be
shredded.
Educate employees that hackers may try to trick them into providing them
with dial tone or dialing a number for them. All reports of trouble, requests
for moving extensions, or any other administrative details associated with
the MERLINs LEGEND Communications System should be handled by
one person (the system manager) or within a specified department.
Anyone claiming to be a telephone company representative should be
referred to this person or department.
No one outside of Lucent Technologies needs to use the MERLIN
LEGEND Communications System to test facilities (lines/trunks). If a caller
claims to be a Lucent Technologies employee, the system manager should
ask for a telephone number where the caller can be reached. The system
manager should be able to recognize the number as a Lucent
Technologies telephone number. Before connecting the caller to the
administrative port of the MERLIN LEGEND Communications System, the
system manager should feel comfortable that a good reason to do so
exists. In any event, it is not advisable to give anyone access to network
facilities or operators, or to dial a number at the request of the caller.
Any time a call appears to be suspicious, call the Lucent Technologies BCS
Fraud Intervention Center at 1-800-628-2888 (fraud intervention for
System 25, PARTNER
Customers should also take advantage of Lucent Technologies monitoring
services and devices, such as the NetPROTECT
detection services, CAS with HackerTracker
Watchdog. Call 1-800-638-7233 to get more information on these Lucent
Technologies fraud detection services and products.
®
and MERLIN Systems).
family of fraud-
SM
®
, and CAT Terminal with
Issue 1
April 1999
A-11