This audit program provides general steps organizations can use to perform an audit of an organization's voice over IP (VoIP) functionality.

Sample controls addressed in this audit program include: determine that the business case document adequately describes the benefits to be realized from deploying VoIP in place of analog technology and is appropriately authorized; determine that, subsequent to deployment, the projected benefits were achieved or exceeded; and determined whether the conversion to VoIP was included in any short-term or long-term strategic IT plan.