Organisations are increasingly aware of the dangers associated with poor or outdated security procedures and users are finally becoming wary of online activity. Yet they have complete confidence in the telephone, whether using a mobile, satellite or VoIP connection.

This faith is misplaced and unfortunately retro-fitting security to VoIP can be a major headache and cost. If organisations are to mitigate the escalating risk associated with IP telephony, and minimise cost, VARs and MSSPs must ensure that security needs are a consideration for businesses implementing these systems from day one.

A recent discussion between CIOs deemed quality of service and cost far more important VoIP concerns than security. This extraordinary attitude, given the general security climate, is born out by the fact that in our experience only 15% of organisations consider security when implementing VoIP and of those, few actually put in place adequate controls.

Often it is suppliers’ consistent failure to even mention security when tendering for VoIP contracts that is fundamentally jeopardising the long term success of the technology and adding untenable corporate risk. Those, very few, suppliers that offer VoIP security up front estimate an additional 20% cost to secure the unified network. Yet the result of this downplaying of VoIP security risks is that most organisations simply will not consider this additional cost, even when presented with a viable security option.

It is the organisations that are convinced to take the right approach up front; building VoIP systems that encompass best practice - from ensuring all calls are routed through a single gateway to end-point verification - that will be best placed to protect their businesses against future security threats.

Kind regards

Scott Nursten
Managing Director
s2s Limited
www.s2s.ltd.uk

Click to read the article this is in response to.