VOIP is an emerging technology that makes it possible to place telephone calls using a broadband Internet connection instead of traditional circuit-based telephone lines. While the benefits could include lower cost and greater flexibility, switching to a new form of communication technology can be more complicated.
NIST recommendations to help in the transition to secure VOIP include: developing appropriate network architecture, include separate voice and data networks where feasible and practical; ensuring the organization can manage and mitigate risks to their information, system operations, and continuity of essential operations when deploying VOIP systems; using and routinely testing the security features included in VOIP systems; and updating VOIP software regularly and frequently.
For more information about the study visit http://csrc.nist.gov/publications/nistpubs/index.html