Widespread acceptance of VoIP has brought cost savings and simplicity for enterprises, but the deployment of VoIP has also introduced a range of security issues. This article examines these security issues, the resultant risks to enterprises, and the role that operators can play in helping enterprises to minimise the risks from their VoIP implementations.