[VOIPSA Best Practices] Best Practices document structure set - next question: are these the appropriate areas?

[dan_york at Mitel.com]

Best Practices team,

Thank you to those of you who sent in comments either on the list or 
directly to me.  A special thanks to Eugene Nechamkin who took the time to 
write up a counter-proposal. Outside of his contribution, basically all 
the feedback was for proposal #2, structuring the document around 
functional areas, and so I'm going to say we're going with that.

Now, the next question - is this list below from the wiki the appropriate 
list of areas for VoIP-related best practices?

1.      Securing Voice and Media stream 
2.      Securing Call Control 
3.      Securing Management Interfaces and APIs 
4.      Securing PSTN Interfaces and Traditional Telephony Issues (i.e. 
don't forget toll fraud) 
5.      Securing Servers and Operating Systems 
6.      Securing IP Endpoints (ex. sets, softphones, etc.) 
7.      Securing the TCP/IP network (ex. VLANs, 802.1X, wireless, etc.) 
8.      Physical Security, including backups, power, etc. 

Are we missing any major areas?  Should these be modified or tweaked?

It seems to me to be a complete list, but then again, I wrote it, so of 
course it would.  Any feedback is welcome.

Regards,
Dan

-- 
Dan York, CISSP
Dir of IP Technology, Office of the CTO
Mitel Corp.     http://www.mitel.com
dan_york at mitel.com +1-613-592-2122
PGP key (F7E3C3B4) available for 
secure communication

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://voipsa.org/pipermail/bestpractices_voipsa.org/attachments/20070119/de5a9eaf/attachment.htm>