IP Office security settings are automatically encrypted and locked to the individual IP Office and cannot be exported, but configuration and other data for IP Office, Voicemail Pro and Avaya one-X® Portal for IP Office contain some unencrypted information that may pose a security threat or privacy issue.

• Any backup data store (for example a file server used for backup/restore, copies of SD Cards) must be secured from unauthorized access

• Any backup/restore mechanism itself should be secure; IP Office, Voicemail Pro and Avaya one-X® Portal for IP Office support secure backup/restore options such as HTTPS and SFTP

• Access to call recordings which are held as files on servers such as Voicemail Pro server should be controlled

• Offline and exported configuration files, SysMonitor logs and Linux server logs should be controlled using, for example, encryption with password protection. This should include any configuration or other sensitive data sent outside of the organization.