Date: Thu, 11 Jul 2024 17:41:40 +0000

Thanks for reaching out regarding the need for Voice security.  This email explains the context of how our solution works, what to expect.  It also has a few business and technical discovery questions, so we understand their business and expectations. It will be great if we can get on a call with the account team / customer to understand more.

Context:

  1.  It is assumed that you use SIP trunks and have SBCs
  2.  The system operates in 3 logical parts
     *   Remote worker security (to protect your voice network from cyberattacks that come through the SBC)
     *   Call screening (to protect your enterprise from scam, robo calls, TDoS attacks and toll fraud).
     *   Custom workflows to detect and alert on special calls like CMS auditor calls
  3.  The system works by integrating only with your SBC and is oblivious to the UC or CC solution that is behind the SBC.  It works with all major SBC vendors and uses standard SIP to interface with the SBC.
  4.  For call screening, the system only looks at call signaling and is never in the media path.  For remote worker security, the system only looks at the logs.
  5.  The display update requires a header manipulation rule to be applied on the SBC.  Assertion will deploy this as part of the implementation.
  6.  The system will operate in learning mode i.e. will not block any call for a minimum duration of 30 days or until it processes a few 100K calls to build AI models.
  7.  The minimum monthly call traffic required for call screening to work is 100K calls.
  8.  It is highly recommended to integrate the system with agent / user disposition (via email integration, agent widget or via CRM sync) to rate a suspicious call.  This is essential to continuously train the system and to reduce its false positives in detecting scam calls.
  9.  The system is a hybrid solution with the Secure Voice core in AWS and Scanner and Defender deployed onPrem or in Assertion cloud.

Discovery questions:

  1.  Do you use Avaya SBC to support remote workers?
  2.  How many remote worker users do you have?
  3.  Have you ever been breached or attacked via a cyberattack on the SBC?
  4.  What is the call traffic per month – In / Out across the enterprise?
  5.  What percentage of the above traffic flows through SBCs?
  6.  Do you have an IVR? What percentage of incoming calls flow via the IVR?
  7.  Have your employees ever been scammed by a phone call?  Are you worried about receiving scam calls?
  8.  Have your employees complained of having received robo / tele marketing calls?
  9.  Is there a process where an employee reports a scam or robo call?  What is it?  What is done about it?
  10. Do you offer callback functionality?  Does it allow the caller to enter a phone number, or it only calls back a registered number (that is already in the database)?
  11. Do you have a business reason to call international phone numbers that are not stored as part of your customer database?
  12. Do you have a reason to enforce calling restrictions like sanctions barring, geo-fencing, DNC? Have you faced any difficulty with that in the past?
  13. Do you have a toll-free number?
  14. Have you ever wished for a single dashboard to show call traffic and threat visibility from all over the world?

Thanks