Information Technology Reference
In-Depth Information
7.5.3
Communications Influence on the IA
2
F
The complexities of voice and data communication to information assurance extend
to business process, technical infrastructure, policies, and people. Continuity of
operation plans (COOP) requires the identification of mission-critical operations.
The IA architect subsequently considers the infrastructure supporting those critical
operations. The first point of recovery is invariably voice—get people talking. The
second point of recovery is data infrastructure supporting mission-critical operations
and applications. Business continuity requires redundancy for key components (e.g.,
processor), intrasystem links (e.g., WAN links), outside services (e.g., PSTN T1s and
Internet), and configurations that minimize operational interruption due to single
points of failure. Emergency preparedness in voice and data is a must in today's E-
commerce environment, where a competitor is merely a mouse-click away.
7.5.3.1
Voice Communications
Threats to voice communications include denial of service, confidentiality viola-
tions via eavesdropping on live conversations or compromising voice mail, and
authenticity compromised by stealing enough recorded messages to piece together a
false message in a recognizable voice. A common threat to voice communications is
toll fraud; this theft of service costs companies many billions of dollars annually.
Voice systems are computer systems running on proprietary hardware, operat-
ing systems, and applications. Although users typically do not have access to the
operating system functions, they do have access to configuration parameters and a
responsibility to configure those parameters to create a safe operating environment.
Part of this configuration is class of service and class of restriction, where groups of
users and stations receive common privileges. This promotes only authorized use of
sensitive features like long-distance or international dialing access.
7.5.3.2 Data Communications
Data communications support many business operations and have become so inter-
twined with the business process that loss of data communications often implies
cessation of business. Every aspect of IA contributes to keeping this critical infra-
structure up and running. IA policies link business requirements to IA services
and define how IA services support the business. IA policies also contribute to data
communications infrastructure installation, configuration, and administration to
establish and maintain secure operations.
7.5.3.3 Convergence
As the business fit and cost savings possible with IP telephony become more vis-
ible, the voice infrastructure will grow increasingly dependent on the data network.
