This publication is issued by the National Institute of Standards and Technology as part of its program to promulgate security standards for information systems as well as standards for test procedures for assessing the level of conformance to these standards. This document is intended for use primarily by system administrators of PBX systems, but may also be useful for security evaluators.