Abstract
VoIP has become an important component of modern corporate communications, and many enterprises depend entirely on it for voice and multimedia. As with most new technologies, there are both security opportunities and risks with VoIP and many of the security concerns associated with this technology are not being addressed. In financial institutions and other industries where there are strict regulatory controls to ensure the privacy of customer information, a continued lack of emphasis on VoIP security will eventually leave organizations open to legal risks. This study deals with the VoIP/UC security threats associated with enterprise communication along with business risks and impacts and provides VoIP/UC Security Best Practices Checklist in order to help integrating VoIP/UC into the holistic corporate information security planning.