This sample report can be used by auditors for measuring and enhancing an organization's Voice over Internet Protocol (VoIP) functionality.

Testing involved activities such as establishing a backup connectivity service provider to provide redundancy within the voice infrastructure, determining key preventative and detective triggers and metrics for monitoring and alerting, analyzing current processes and defining key administrative activities, and assigning administrative responsibilities to a separate group within the voice team who will be responsible for system administration and maintenance. The following observations were noted as a result of testing:

• A large number of local users have complete administrative access.
• Passwords for generic/system accounts are not rotated.
• Alerting mechanisms are not set up for changes made to voice infrastructure.
• Users may not be aware of available features and functionalities.