[VOIPSEC] Policy modifications for VOIP

[Mark Teicher]

it seems that organizations that is contemplating migrating to VOIP or has completed  a trial of VOIP may also want to examine modifications to their Business Continuity policies, since dial tone is no longer a TDM based issue. 

What items needs to be examined in order to make certain changes to policies, procedures, processes for VOIP.??  
What is the back up plan if network connectivity is lost by accident?  For example, some big surly looking dude with a bum knee who may have just been woken from his work day nap (hard to find good security people these days)  as the VOIP vendor inserts changes into the network.   The surly guy upset rips out all the network wiring and then can't figure out why their is no dial tone, but yet the cross-connect wires look punched down correctly.

Understanding the changes to a network environment prior to trial and error is probably the first step in many security recommendations to a converged network.

1. Business Continuity policy modifications (example above)
2. Security policy modification
3. .....

Can anyone think of others ??