Remote Access Were dial-in connections used to access the routers. Obtain population of routers with modems and obtain the telephone numbers of the routers. Determine if users were properly authenticated when remotely accessing the routers. Determine if access attempts were logged. Determine if the telephone numbers of the routers were within Company defined telephone prefixes.
Hackers commonly poll prefixes to obtain access to a network.
Change Management Determine how changes to the router environment were made. Determine if changes to the router configuration were documented. Network Monitoring Determine the mechanisms for monitoring the network. Determine the personnel that monitor the network. Determine the security of the network monitoring tools.