[VOIPSEC] Auditing of VoIP

[richb2 at pegasus.rutgers.edu]

As I explained in my last message up here, I am interested in getting
involved with the auditing of VoIP. The ISACA group, which certifies the
CISA exam for IT auditors, really doesn't seem too sure of where VoIP fits
into an IT audit. At least I can't find anyone up there to answer my
questions. Or is Voip not really considered worth auditing? Who is doing
the SAS 90 audits of VoIP? Anyone? If I wanted to look for a job doing
this as a CISA, should I be looking at the Big 4, at firms that specialize
in security, at business process consulting firms, at the Cisco partners
(g.d help me if this is my only path), who? Who are the people who buy
VoIPShield?