Only 3 percent have adequate IP telephony security: Integ

Stuart Corner
Tuesday, 14 March 2006 13:21

Business IT - Technology

Communications systems integrator, Integ, has released findings from a national survey into IP telephony security, claiming it shows that 97 percent of organisations do not have adequate security measures in place when they implement IP telephony.

Integ surveyed 200 medium to large business and government organisations in late 2005 during its national road show.

According to Integ, "For the three percent that do [have adequate IP telephony security] their IP telephony implementation is approached with strategic, long-term plans that cover systems processes and policies from the switch and router level right through to password control."

"Despite the concerns about IP telephony security, there appears to be a real lack of understanding about what the threats are and how to guard against them," said Ian Poole, CEO, Integ.

"When you move voice onto a single data network it naturally becomes exposed to increased security threats. For example a denial of service attack which may have previously disrupted data services, can significantly impact an organisation's entire voice network. This is unacceptable for day-to-day business communications.

"Companies need to think about IP telephony security as part of their broader IT security strategy. This means identifying the points of the network that are vulnerable to attack and undertaking effective security measures, preferably prior to the adoption of IP telephony systems, and on an ongoing basis."

The Integ survey found that:
- 65 percent of organisations surveyed indicated they are currently in IP telephony trial, assessment or review phase and 44 percent of these organisations anticipate their VoIP or IP telephony roll-out would be complete within two years
- 25 percent of potential adopters of IP telephony rate security as their biggest concern;
- 57 percent of organisations surveyed reported frequent breaches to the security of their data networks (more than two per year) and more than 15 percent indicated that these breaches caused significant or extensive damage to business operation;
- 93 percent reported the implementation of anti-virus solutions. However, 48 percent indicated they were still affected by virus attacks;
- Nearly 33 percent had either never undertaken a security audit of their data or telephony networks or had not done so for more than 12 months.

Integ has produced a white paper "to help organisations identify security risks and adopt an effective security plan. It is available here.