[VOIPSEC] SOX Compliance auditing for VoIP

[Mark Teicher]

Interesting, a lot of information in his blog post fill in the missing information from a chapter of a recent book I was reading on VoIP Security.

Thank you very much for the information

-----Original Message-----
>From: Irwin Lazar <ilazar at burtongroup.com>
>Sent: Apr 14, 2006 10:24 PM
>To: voipsec at voipsa.org
>Subject: Re: [VOIPSEC] SOX Compliance auditing for VoIP
>
>FYI - Gary Audin has been posting a discussion about SOX compliance and VoIP
>at VoIP Loop.
>
>His latest post is at:
>
>http://www.voiploop.com/index.php?option=com_content&task=view&id=1011&Itemi
>d=34
>
>
>
>> From: ZhaoL <hi2005 at gmail.com>
>> Date: Fri, 14 Apr 2006 11:13:05 +0800
>> To: Mark Teicher <mht3 at earthlink.net>
>> Cc: VOIPSA Mailing List <Voipsec at voipsa.org>
>> Subject: Re: [VOIPSEC] SOX Compliance auditing for VoIP
>> 
>> SOX compliance focuses on financial report and relevant data processing and
>> generating, the corresponding controls and safeguards. IMHO, if VoIP is not
>> their business, ie. revenue generator, you might not cover VoIP auditing in
>> your SOX compliancy audit, because it's not used, in general, to process and
>> control those numbers. However, as to those VoIP operators, it's different.
>> Security control of VoIP billing will impact the final financial results and
>> morever the shareholders' benefit.  FYI.
>> 
>> Richard
>> http://hi2005.wordpress.com
>> 
>> On 3/30/06, Mark Teicher <mht3 at earthlink.net> wrote:
>>> 
>>> I have read and researched on the Internet regarding SOX compliancy
>>> auditing for VoIP, but it is not quite clear where to even begin or what a
>>> SOX Compliance audit report for an organization's VoIP implementation would
>>> look like?  Has anyone on the list actually conducted a SOX Compliance audit
>>> for their VoIP implementation or product offering ?
>>> 
>>> /thanks in advance for the information
>>> 
>>> /m
>>> 
>>> _______________________________________________
>>> Voipsec mailing list
>>> Voipsec at voipsa.org
>>> http://voipsa.org/mailman/listinfo/voipsec_voipsa.org
>>> 
>> _______________________________________________
>> Voipsec mailing list
>> Voipsec at voipsa.org
>> http://voipsa.org/mailman/listinfo/voipsec_voipsa.org
>
>
>_______________________________________________
>Voipsec mailing list
>Voipsec at voipsa.org
>http://voipsa.org/mailman/listinfo/voipsec_voipsa.org