Sie sind auf Seite 1von 7

February 22, 2013 BY ELECTRONIC FILING Marlene H.

Dortch Office of the Secretary Federal Communications Commission 445 12th Street, SW Suite TW-A325 Washington DC 20554 RE: EB Docket No. 06-36 Annual CPNI Certification and Accompanying Statement Filed in the year 2013 covering the prior calendar year 2012 Mashell Telecom, Inc. d/b/a Rainier Connect FCC Form 499 Filer ID: 803703

To Whom It May Concern: Attached is Mashell Telecom, Inc. d/b/a Rainier Connects CPNI Certification for the year 2013 covering the prior year 2012. Our certification will be filed electronically in the ECFS system. Please contact me if you have any questions or concerns regarding this filing. Sincerely, Mark Carrier Regulatory & Compliance Manager Mashell Telecom, Inc. d/b/a Rainier Connect PO Box 683 Centralia, WA 98531 360-623-4555 Direct 360-388-6392 Cell 360-623-1115 - Fax mark.carrier@rainierconnect.net

02/22/13

STATEMENTOFCOMPLIANCEWITHPROTECTIONOF CUSTOMERPROPRIETARYNETWORKINFORMATIONRULES MarkCarriersignsthisCertificateofComplianceinaccordancewithSection222ofthe TelecommunicationsActof1996,asamended,47USC222,andtheFCCsCodeofFederal Regulations(CFR)Title4764.2009,onbehalfofMashellTelecom,Inc.d/b/aRainierConnect. ThisCertificateofComplianceaddressestherequirementofFCCs(CFR)Title4764.2009that theCompanyprovidebothaCertificateofComplianceandastatementaccompanyingthe certificatetoexplainhowitsoperatingproceduresensurecompliancewithFCCs(CFR)Title47 64.2001etseq. OnbehalfoftheCompany,Icertifyasfollows: 1. IamtheRegulatory&ComplianceManageroftheCompany. Mybusinessaddressis: 1417KreskyAve.#1,POBox683, Centralia,WA98531 2. IhavepersonalknowledgeofthefactsstatedinthisStatementofCompliance.Iam responsibleforoverseeingcompliancewiththeFederalCommunicationsCommissions (FCC)rulesrelatingtoCustomerProprietaryNetworkInformation(CPNI). 3. ItisthepolicyoftheCompanytocomplywiththeletterandspiritofalllawsofthe UnitedStates,includingthosepertainingtoCPNIcontainedinSection222orthe TelecommunicationsActof1996,asamended,47USC222,andtheFCCsCodeof FederalRegulations(CFR)Title4764.2001etseqasoutlinedintheCPNIOrderand subsequentproceedings.Thecompanyfollowsindustrystandardpoliciesandpractices topreventunauthorizedaccesstoCPNIbyanyoneotherthanthesubscriberorthe Company. Somebutbynomeansalloftheseproceduresareprovidedbelowinthisstatement. MoredetailedproceduresarelistedintheCompanysCPNIComplianceManualand OperatingProcedures,whichisprovidedtoallemployeesandonwhichtheyreceive training.EmployeesareresponsibleforreadingandreviewingtheCPNIManualandto seekclarificationfromtheirManagerortheCompanysCPNIComplianceOfficer regardinganyCPNIrelatedquestion.TheCompanydoesnotandhasnotinthepast providedaccesstoCPNItocontractorsandthirdpartyvendors,otherthanforuses authorizedbySection222oftheCommunicationsActof1934,asamended,suchas assistancewiththepreparationoftheCompanysmonthlybillstoitsCustomers.
Page1of5

DefinitionofCPNI InformationobtainedbytheCompanyabouttheCustomerandthecustomers telecommunicationsservices,(includingInterconnectedVoIPservice)inthecourseof providingthoseservices.CPNIincludesthequantity,technicalconfigurations,type, destinationandamountofuseofthoseservices. CPNITrainingandDisciplinaryPolicy 1. TheCompanyprovidesongoingtrainingtoitspersonnelregardingwhentheyare authorizedtouseCPNI,aswellaswhentheyarenotauthorizedtouseCPNI. However,CompanypersonnelmakenodecisionsregardingCPNIwithoutfirst consultingwithmyself,CustomerServiceManager,AmandaSingleton,Quality AssuranceSpecialistTanyaLane,CustomerServiceSupervisor,TecklaWikander orMarketing&CommercialSalesManager,DebbieReding.Alsoincludedis trainingregardingtheCompanysCustomerAuthenticationproceduresaswellas GeneralCPNIrulesandregulationsandtheCompanysownCPNIcompliance procedures.TheCompanyhasanexpressdisciplinaryprocessinplacefor personnelwhomakeunauthorizeduseofCPNIorotherwiseviolatethe CompanysCPNIPolicies.Thisprocessincludesthepotentialforterminationof anemployeesemploymentwiththecompanyforrepeatorwillfulviolations. CustomerAuthenticationProcedures 1. PriortoprovidinganyCPNI,includingCallDetailRecords(CDR)andnoncall detailinformation,allCustomersmustbeproperlyauthenticatedpriorto disclosingCPNIduringCustomerinitiatedphonecontact,onlineaccountaccess oraninstorevisit. 2. ToreceiveCPNI,includingCDR,Customersmustuseapreestablishedpassword orbeabletoaddressthespecificserviceissuetheyareinquiringabout(suchas thephonenumbercalled,whenitwascalledand,ifapplicable,theamount chargedforthecall).Incasesofthelatter,Companyrepresentativesmayonly addresstheissuesaboutwhichtheCustomerisabletodemonstrateknowledge, TheCompanyhasestablisheddetailedpoliciesforestablishmentofCustomer passwords,whichareoutlinedinitsCPNIPolicyManual. 3. IftheCustomerisunabletoprovideacorrectpassword,CPNImaybesharedby oneofthefollowingprocedures: a. CallingtheCustomerbackatthetelephonenumberofrecordandasking aseriesofquestionsabouttheaccountthatonlythecustomershould beabletoanswer.(Anumbersuppliedbythecallerduringthecurrent inquirywillnotsufficeasthecallbacknumberforthispurpose.Itmust
Page2of5

beaCompanyassignedphonenumberthattheCompanyhasonrecord forthisCustomersCompanyprovidedphoneline). b. Mailingtheinformationtothepostaloremailaddressofrecord,ifthe addresshasnotbeenchangedinthepast30days. c. InpersonuponpresentationofavalidphotoID. CompanyUseofCPNI 1. TheCompanyhasestablishedasystembywhichthestatusofacustomers approvalforuseofCPNI,asdefinedin47USC222(h)(1),canbeclearly establishedpriortotheuseofCPNI.TheCompanyusestheOptoutapproval processforpurposesofobtainingCustomerspermissiontouseCPNIfor marketingservicesoutsidethecategoryofservice(s)aCustomeralready subscribesto.CustomersareprovidednoticeannuallyoftheirrighttoOpt out.TheCompanyreliesontheinvolvementofitshighlevelmanagementto ensurethatnouseofCPNIismadeuntilafullreviewofapplicablelawhas occurred. 2. TheCompanyseldomusesCPNIformarketingpurposes,buttheCompanys policyistomaintainrecordsofallinstanceswhereCPNIisused,disclosedor providedtothirdpartiesifiteverdoesso,orwherethirdpartiesareallowed accesstoCPNIinfullcompliancewithregulations.Theserecordsincludea descriptionofeachcampaign,thespecificCPNIthatwasusedinthecampaign, andtheproductsandservicesthatwereofferedaspartofthecampaign.The Companymaintainstheserecordsinitsofficesforaminimumofoneyear. 3. TheCompanyspolicyistomaintainrecordsofCustomerapprovalforuseof CPNI,aswellasnoticesrequiredbytheFCCsregulations,foraminimumofone year.TheCompanymaintainsrecordsofcustomerapprovalanddisapprovalfor useofCPNIinareadilyavailablelocationthatisconsultedonanasneeded basis. 4. TheCompanyspolicyistomaintainrecordsofaCPNIbreachforaminimumof twoyears.Theserecordswillincludeadescriptionofthestepsthecompany tooktopreventthebreach,howthebreachoccurred,theimpactofthebreach andproofofnotificationtolawenforcementandthecustomer,ifapplicable. 5. TheCompanyhasasupervisoryreviewprocessregardingcompliancewiththe FCCsrulesrelatingtoprotectionofCPNIforoutboundmarketingsituations.The purposeofthissupervisoryreviewprocessistoensurecompliancewithallrules priortousingCPNIforapurposeforwhichcustomerapprovalisrequired. Companypersonnel,priortomakinganyuseofCPNI,mustfirstconsultwith
Page3of5

CustomerServiceManager,AmandaSingleton,Marketing&CommercialSales Manager,DebbieRedingormeregardingthelawfulnessofusingtheCPNIinthe mannercontemplated.IndecidingwhetherthecontemplateduseoftheCPNIis proper,CustomerServiceManager,AmandaSingleton,Marketing&Commercial SalesManager,DebbieRedingorIconsultoneormoreofthefollowing:The CompanysownCPNIComplianceManual,theapplicableFCCregulations,the FCCsComplianceGuideand,ifnecessary,legalcounsel.TheCompanyssales personnelmustobtainsupervisoryapprovalfromCustomerServiceManager, AmandaSingleton,Marketing&CommercialSalesManager,DebbieRedingor meregardinganyproposeduseofCPNI. 6. Further,CustomerServiceManager,AmandaSingleton,Marketing& CommercialSalesManager,DebbieRedingorIpersonallyoverseetheuseof optin,optout,oranyotherapprovalrequirements,ornoticerequirements (suchasnotificationtothecustomeroftherighttorestrictuseof,disclosureof, andaccesstoCPNI),containedintheFCCsregulations.Wealsoreviewall noticesrequiredbytheFCCregulationsforcompliancetherewith. 7. CustomerServiceManager,AmandaSingleton,Marketing&CommercialSales Manager,DebbieRedingorIalsoensurethattheCompanyentersinto confidentialityagreements,asnecessary,withanyjointventurepartnersor independentcontractorstowhomitdisclosesorprovidesaccesstoCPNI. Confidentialityprovisionsmaycontainedinaseparateagreementoraspartof anIndependentContractorsAgreementbutineithercase,specificlanguage dealswithCPNIandthepartnerorcontractorsunderstandingoftheissueand theCompanysCPNIpolicy.TrainingisprovidedbytheCompanywhen appropriate. NoticetoCustomerofAccountChanges 1. TheCompanymustnotifytheCustomerimmediatelybyeithermailtothe addressofrecord,orbyvoicemailortextmessagetothetelephonenumberof recorduponthefollowingevents: a. Anewpasswordiscreatedorchanged. b. Theaddressofrecordischanged. c. Theonlineaccountofrecordischanged. d. Backupquestionsareusedtoreissuealostorforgottenpassword. e. Asecuritybreachoccurs. ReportingofCPNIViolationsandBreaches TheFollowingrepresentsaCPNIviolationorbreach:
Page4of5

1. 2. 3. 4.

Customeraccountinformationisstolen; CDRsareprovidedwithoutauthentication; Apretextisattempted,or Databasesarehacked.

Companyemployees,agentsandindependentcontractorsarerequiredtoreporta violationorbreachtotheCompanyComplianceOfficerimmediatelyupon knowledgeofsuchviolationorbreach. TheCompanyshallnotifylawenforcementofabreachofitscustomersCPNIno laterthansevenbusinessdaysafterareasonabledeterminationofabreachthrough acentralreportingfacilitytotheUnitedStatesSecretService(USSS)andtheFederal BureauofInvestigation(FBI).TheCompanymaynotifytheCustomerand/or disclosethebreachpubliclyaftersevendaysfollowingthenotificationtotheUSSS andFBI.TheCustomernotificationtimelinemayberevisedattherequestoflaw enforcement. DistributionofCPNItoLawEnforcementAgencies/FCCNotification 1. Intheabsenceofanappropriatewrittenrequestfromthecustomer,the CompanywillprovidetheCustomersphonerecordsorotherCPNItoa lawenforcementagencyonlyinresponsetoawarrantorsubpoenathat specifiestheparticularCPNItobefurnished.Companyemployeesmust directallrequestsofCPNIfromlawenforcementagencies(whetheror nottherequestisaccompaniedbyawarrantorsubpoena)totheCPNI ComplianceOfficer,whowillberesponsibleforhandlingsuchrequests. 2. TheCompanywillprovidewrittennoticewithinfive(5)businessdaysto theFCCofanysignificantinstancewhereOptoutmechanismsdonot workeffectively. IpersonallyoverseecompletingandsubmittingEBDocketNo.0636,whichisdueonor beforeMarch1eachyear,whichiscertifiedbyCompanyPresident&CEO,Brian Haynes.Theformincludesexplanationofanyactiontakenagainstdatabrokers,a summaryofallcustomercomplaintsandanexplanationofbreaches. __________________________________________________________ Signature MashellTelecom,Inc.d/b/aRainierConnect______________________ Company 02/22/13___________________________________________________ Date
Page5of5

Das könnte Ihnen auch gefallen