Practical VoIP Security
Written for the thousands of IT professionals who are now responsible for deploying and maintaining secure VoIP networks, this book covers evaluation, design, integration, and management of VoIP networking components.
TABLE OF CONTENTS Practical VoIP Security
GLBA: Gramm-Leach-Bliley Act
The US Gramm-Leach-Bliley Act of 1999 commonly referred to as GLBA is landmark legislation that completely reorganized the statutory and legislative framework in place since the 1930s for the banking and financial services market. Of particular note is Title V, Subtitle A, Section 501, which requires that banking, consumer finance, securities, and insurance companies develop and meet new standards for protection of consumer privacy and safeguarding of financial institution infrastructure. Although VoIP systems were not specifically called out in the Act itself, the Federal Deposit Insurance Corporation (FDIC) and other financial regulatory agencies subsequently have issued VoIP-specific guidance to be used by regulated entities.
GLBA Regulatory Basics
Because the regulatory scope of GLBA is extensive and we really are interested only in the privacy and security effects of the legislation (and specifically, how they interact with VoIP systems), we will limit our discussion to Title V PRIVACY. For those in the security community, every security reference to GLBA that you ve seen is tied back to Title V, and we will review its contents later in this chapter. In addition, we will discuss supplementary guidance from consultants and regulators (including the FDIC VoIP recommendation) to help you understand what your organization will need for your VoIP system to operate in compliance with GLBA.
Direct from the Regulations
Title V is broken out into two subtitles. Subtitle A, Disclosure of Nonpublic Personal Information, is where we will center most of our attention, particularly in Section 501. Subtitle B, Fraudulent Access to Financial...
Copyright Syngress Publishing, Inc. 2006 under license agreement with Books24x7
