You are on page 1of 6

Industry Assurance Consulting, Inc.

IACAdviceCompliance,Consulting,Certifications
Telephone:(215)4327341
6303BlueLagoonDrive,Suite400,Miami,FL33126
www.iacadvice.com
,
Email:compliance@iacadvice.com

January29,2014

BYELECTRONICSUBMISSION

MarleneH.Dortch,Secretary
FederalCommunicationsCommission
OfficeoftheSecretary
44512thStreet,S.W.,SuiteTWA325
Washington,DC20554

Subject:EBDocketNo.0636,CPNICertificationdueMarch1,2014(CY2013Operations)

DearMs.Dortch:

TeleSystems,Inc.(herebyreferredtoasthe"Company"),submitsthefollowingCPNI
Certification,regardingitsCalendarYear2013operations,incompliancewithSection64.2001
etseq.oftheCommission'srules.

TheCompanyrespectfullyaskstheCommissiontoacceptthefollowingCertificationas
timelyfiled,intermsoftheMarch1,2014filingdeadlinelistedin47C.F.R.64.2009(e).


________________________
AlonzoBeyene
IndustryAssuranceConsulting,Inc.
RegulatoryAnalyst

Enclosures

cc: FCCEnforcementBureau,TelecommunicationsConsumersDivision,
44512thStreet,SW,Washington,DC20554
BestCopyandPrinting,Inc.(viaemail fcc@bcpiweb.com)

EB Docket 06-36
Annual 64.2009(e) CPNI CertificationforActivitiesofCalenarYear2013
Datefiled:January29,2014
NameofTheCompany(s)covered bythis certification:TeleSystems.Inc.
Form499FilerID:829108
Nameofsignatory:CarlDouglasSherrod
Title ofsignatory:President
I,CarlDouglasSherrod, certifythatIamanofficerofthe Company named above,andacting as
anagentofthe Company,thatIhavepersonal knowledgethatthe Company hasestablished
operatingproceduresthatareadequateto ensurecompliancewiththe Commission's CPNI
rules.See47C.F.R. 64.2001et seq.
Attachedto this certificationisanaccompanyingstatementexplaininghow the Company's
proceduresensure thatthe companyisincompliancewiththe requirements(includingthose
mandatingthe adoptionofCPNI procedures,training, recordkeeping, andsupervisoryreview)
setforthinsection 64.2001 et seq.ofthe Commission's rules.
TheCompany hasnot hadtotakeanyaction(s)(i.e.,proceedings institutedor petitionsfiled by
acompanyat eitherstate commissions, the courtsystem,or atthe Commission againstdata
brokers) againstdata brokers inthe pastyear. Ifaffirmative,the Company isaware thatit must
explain any actions that it has had to take against dat a brokers. The Company is aware t hatit
mustreportonanydata thatit haswithrespect to the processesthatanypretextershaveused
(if any),to attemptto accessCPNI, andwhatstepsthe Companyistakingto protectCPNI.
TheCompanyhasnotreceived anycustomercomplaintsinthe pastyearconcerningthe
unauthorizedreleaseofCPNI. TheCompanyisaware, thathadit hadanysuchcomplaints, it
wouldhaveto reportthe numberof customercomplaintsthatthe Companyhasreceived
relatedto unauthorizedaccess to CPNI, or unauthorizeddisclosure ofCPNI, broken downby
categoryofcomplaints,e.g.,instancesofimproperaccess byemployees, instancesof improper
.disclosure to individualsnotauthorizedto receivethe data, or instancesofimproperaccessto
onlinedata byindividualsnotauthorizedto view the data.
Thecompanyrepresents andwarrantsthatthe abovecertificationisconsistentwith47C.F.R.
1.17,whichrequirestruthfulandaccurate statementsto the Commission.Thecompanyalso
acknowledges hatfalsestatementsandmisrepresentationsto the Commission arepunishable
underTitle l' 0 ode andmaysubjectit to enforcementaction.
Signed [Signature of an officer, asagent of the carrier]
Attachments: AccompanyingStatementexplaining CPNIprocedures

AccompanyingStatementonCompanysCompliancewith47C.F.R.64.2009,Safeguards
requiredforuseofCustomerProprietaryNetworkInformation(CPNI)andCompliancewith
Section64.2001etseq.oftheCommission'sRules.


A. Definitions
CPNI(CustomerProprietaryNetworkData)referstodatasuchascustomername,address,
contactdataaswellasquantity,technicalconfiguration,type,destination,andamountofuse
ofservicesubscribedtobytheCompanyscustomers,andmadeavailablebytheCompanys
customerstothecompany,solelybyvirtueofthecustomerrelationshiptothecompany.Italso
includesdatacontainedincustomerbills,ifapplicable.


B. Use of CPNI
(1)TheCompanymay,ifapplicable,use,disclose,orpermitaccesstoCPNIforthepurposeof
providingormarketingserviceofferingsamongthecategoriesofservice(i.e.,local,
interexchange,andCMRS)towhichthecustomeralreadysubscribesfromtheCompany,
withoutcustomerapproval.

(2)TheCompanydoesnotuse,disclose,orpermitaccesstoCPNItomarketserviceofferingsto
acustomerthatrequireoptinoroptoutconsentofacustomerunder47C.F.R.64.2001et
seq.

(3)TheCompanydoesnotuse,discloseorpermitaccesstoCPNItoidentifyortrackcustomers
thatcallcompetingserviceproviders.

(4)Notwithstandingtheforgoing:ItistheCompanyspolicythattheCompanymayuse,
disclose,orpermitaccesstoCPNItoprotecttherightsorpropertyoftheCompany,orto
protectusersofthoseservicesandothercarriersfromfraudulent,abusive,orunlawfuluseof,
orsubscriptionto,suchservices.


C. Safeguards Required for the Use of CPNI
(1)ItisthepolicyoftheCompanytotrainitsapplicablepersonnel,onthecircumstancesunder
whichCPNImay,andmaynot,beusedordisclosed.ItisaviolationoftheCompanyspoliciesto
discloseCPNIoutsideoftheCompany.Anyemployeethatisfoundtohaveviolatedthispolicy
willbesubjecttodisciplinaryactionuptoandincludingtermination.

(2)ItistheCompanyspolicytorequirethatarecordbemaintainedofitsownanditsaffiliates
salesandmarketingcampaignsthatusetheircustomersCPNI.TheCompanymaintainsa
recordofallinstanceswhereCPNIwasdisclosedorprovidedtootherthirdparties,orwhere
thirdpartieswereallowedtoaccesssuchCPNI.Therecordincludesadescriptionofeach
campaign,thespecificCPNIthatwasusedinthecampaign,andwhatproductsandservices
wereofferedasapartofthecampaign.Suchrecordsareretainedforaminimumofoneyear.

(3)TheCompanyhasestablishedamandatorysupervisoryreviewprocessregarding
compliancewithCPNIrulesforoutboundmarketing.Ifapplicable,salespersonnelmustobtain
supervisoryapprovalofanyproposedoutboundmarketingrequestforcustomerapproval.The
Companyspoliciesrequirethatrecordspertainingtosuchcarriercomplianceberetainedfora
minimumperiodofoneyear.

(4)IncompliancewithSection64.2009(e),theCompanywillprepareacompliancecertificate
signedbyanofficeronanannualbasisstatingthattheofficerhaspersonalknowledgethatthe
Companyhasestablishedoperatingproceduresthatareadequatetoensurecompliancewith
47C.F.R.64.2001etseq.Thecertificateistobeaccompaniedbythisstatementandwillbe
filedinEBDocketNo.0636annuallyonMarch1,fordatapertainingtothepreviouscalendar
year.Thisfilingwillincludeanexplanationofanyactionstakenagainstdatabrokersanda
summaryofallcustomercomplaintsreceivedinthepastyearconcerningtheunauthorized
releaseofCPNI.


D. Safeguards on the Disclosure of CPNI
ItistheCompanyspolicytotakereasonablemeasurestodiscoverandprotectagainst
attemptstogainunauthorizedaccesstoCPNI.TheCompanywillproperlyauthenticatea
customerpriortodisclosingCPNIbasedoncustomerinitiatedtelephonecontactoronline
access,asdescribedherein.

(1)MethodsofAccessingCPNI.
(a)TelephoneAccesstoCPNI.ItistheCompanyspolicytoonlydisclosecalldetaildata
overthetelephone,basedoncustomerinitiatedtelephonecontact,ifthecustomerfirst
providestheCompanywithapassword,asdescribedinSection(2),thatisnot
promptedbythecarrieraskingforreadilyavailablebiographicaldata,oraccountdata.If
thecustomerisabletoprovidecalldetaildatatotheCompanyduringacustomer
initiatedcallwithouttheCompanysassistance,thentheCompanymaydiscussthecall
detaildataprovidedbythecustomer.

(b)OnlineAccesstoCPNI.ItistheCompanyspolicytoauthenticateacustomerwithout
theuseofreadilyavailablebiographicaldata,oraccountdata,priortoallowingthe
customeronlineaccesstoCPNIrelatedtoatelecommunicationsserviceaccount.Once
authenticated,thecustomermayonlyobtainonlineaccesstoCPNIrelatedtoa
telecommunicationsserviceaccountthroughapassword,asdescribedinSection(2),
thatisnotpromptedbytheCompanyaskingforreadilyavailablebiographicaldata,or
accountdata.

(2)PasswordProcedures
Toestablishapassword,theCompanywillauthenticatethecustomerwithouttheuseofreadily
availablebiographicaldata,oraccountdata.TheCompanymaycreateabackupcustomer
authenticationmethodintheeventoflostorforgottenpasswords,butsuchbackupcustomer
authenticationmethodwillnotpromptthecustomerforreadilyavailablebiographicaldataor
accountdata.Ifthecustomercannotprovidethecorrectpasswordorcorrectresponseforthe
backupcustomerauthenticationmethod,thecustomermustestablishanewpasswordas
describedinthisparagraph.

(3)NotificationofAccountChanges
TheCompanywillnotifycustomersimmediatelywheneverapassword,customerresponsetoa
backupmeansofauthenticationforlostorforgottenpasswords,onlineaccount,oraddressof
recordiscreatedorchanged.Thisnotificationisnotrequiredwhenthecustomerinitiates
service,includingtheselectionofapasswordatserviceinitiation.Thisnotificationmaybe
throughaCompanyoriginatedvoicemailortextmessagetothetelephonenumberofrecord,
orbymailtotheaddressofrecord,andmustnotrevealthechangeddataorbesenttothenew
accountdata.

(4)BusinessCustomerExemption
TheCompanymaybinditselfcontractuallytoauthenticationregimesotherthanthose
describedinthisSectionDforservicesitprovidestoitsbusinesscustomersthathavebotha
dedicatedaccountrepresentativeandacontractthatspecificallyaddressestheCompany's
protectionofCPNI.

E. Notification of CPNI Security Breaches
(1)ItistheCompanyspolicytonotifylawenforcementofabreachinitscustomers
CPNIasprovidedinthissection.TheCompanywillnotnotifyitscustomersordisclosethe
breachpubliclyuntilithascompletedtheprocessofnotifyinglawenforcementpursuantto
paragraph(2).

(2)Assoonaspracticable,andinnoeventlaterthanseven(7)businessdays,afterreasonable
determinationofthebreach,theCompanywillelectronicallynotifytheapplicableUS
governmentagenciessuchastheFederalBureauofInvestigation.
(a)Notwithstandingstatelawtothecontrary,theCompanywillnotnotifycustomersor
disclosethebreachtothepublicuntil7fullbusinessdayshavepassedafternotification
toapplicableUSgovernmentagencies,exceptasprovidedinparagraphs(b)and(c).

(b)IftheCompanybelievesthatthereisanextraordinarilyurgentneedtonotifyany
classofaffectedcustomerssoonerthanotherwiseallowedunderparagraph(a),inorder
toavoidimmediateandirreparableharm,itwillsoindicateinitsnotificationandmay
proceedtoimmediatelynotifyitsaffectedcustomersonlyafterconsultationwiththe
relevantinvestigationagency.TheCompanywillcooperatewiththerelevant
investigatingagencysrequesttominimizeanyadverseeffectsofsuchcustomer
notification.

(c)Iftherelevantinvestigatingagencydeterminesthatpublicdisclosureornoticeto
customerwouldimpedeorcompromiseanongoingorpotentialcriminalinvestigation
ornationalsecurity,theCompanywillcomplywithsuchagencyswrittendirectives,
includingdirectivesnottosodiscloseornotifyforaninitialperiodofupto30days,and
extendedperiodsasreasonablynecessaryinthejudgmentoftheagency.

(3)AftertheCompanyhascompletedtheprocessofnotifyinglawenforcementpursuant
toparagraph(2),itwillnotifyitscustomersofabreachofthosecustomersCPNI.

(4)Recordkeeping.TheCompanywillmaintainarecord,electronicallyorinsomeother
manner,ofanybreachesdiscovered,notificationsmadetotheUSSSandtheFBIpursuantto
paragraph(2),andnotificationsmadetocustomers.Therecordwillinclude,ifavailable,dates
ofdiscoveryandnotification,adetaileddescriptionoftheCPNIthatwasthesubjectofthe
breach,andthecircumstancesofthebreach.TheCompanywillmaintaintherecordfora
minimumof2years.

(5)Strictcontrolsareinplaceinvolvingresponsestolawenforcementagenciesthatservethe
Companywithvalidlegaldemands,suchasacourtorderedsubpoena,forCPNI.TheCompany
willnotsupplyCPNItoanylawenforcementagencythatdoesnotproduceavalidlegal
demand.

You might also like