S 2.473 Selection of PBX service providers

Initiation responsibility: IT Security Officer, Head of IT

Implementation responsibility: Administrator, Head of IT, PBX System Manager

In almost all cases, it must be possible for the users to call other persons whose PBX end devices are not connected to their own PBX system. Examples of this include:

To be able to call persons who are not connected to the organisation's own PBX system (for example, calls to end devices at other locations of the organisation, mobile phones and external communication partners), the PBX system must be connected to the PSTN (Public Switched Telephone Network) via a subscriber line (also referred to as "last mile"). For this purpose, a PBX service provider must be commissioned.

The PBX service provider provides the physical connection between the organisation's PBX system and the PSTN and also takes care of the connection to the PSTN. IP system connections are an exception, where exclusively internet connections are used and the connection to the PSTN is the sole responsibility of the PBX service provider. As the external PBX connections are transmitted via the PBX service provider, the selection of the provider, the services provided, and the number of connections that can be used simultaneously is important.

The following requirements can be taken into account for the selection:

In addition to the security aspects, contractual and financial aspects should also be taken into account:

All services agreed to must be specified clearly and concisely in writing.

Review questions: