PBX audit

I reviewed my old notes and found very useful list. Top 11 points how to audit PBX. It is from Nortel Meridian times, however also good for IP-PBX. Services are the same only layers and possibilities are different.

PBX audit list:

1. Administrative Access
2. System Configuration
3. Audit Trails (i.e. History File, Audit Trail, Call Detail Recording)
4. Station – (Basic Access Restrictions, Station Features, Hunt and Call Forwarding features, External References)
5. Trunking (Routes, Trunks)
6. Call Privileges (Code Restrictions, Scheduled Access Restrictions, Controlled Class of Service, Basic and Network Authorization Codes, Forced Accounts)
7. Feature Access Review
8. Direct Inward System Access (DISA, DISA Digit Insertion)
9. ACD (ACD Pattern Confguration, Agents)
10. Call Routing (Route List Indices, Routing Control, Translation Tables, Digit Manipulation, Incoming DID, Incoming Trunk Exclusions, Call Screening, Class of Service)
11. Mailbox Audit (Disabled Mailboxes, Unused Mailboxes, Invalid Login Attempts, External DNs, Restriction/Permission Lists, Messaging Features, Voice Services, Fax Services, Additional Features, Monitoring Access)