What are the security concerns when networks share both voice and data?  Organizations face new security concerns in a converged network and each application on that converged network represents an entry point for hackers.  Protecting the traditional data network is only half the solution.  the concerns aren't new, but attacks can occur through security "gaps" that occur at the convergence of two, formerly separate networks.  Denial of Service, eavesdropping, invasion of privacy through signal protocol tampering, identity spoofing, and toll fraud are just some of the most significant concerns in a VoIP environment.  Converged networks require converged security that expands traditional data security policies/procedures to protect the privacy of all network information, including IP telephony traffic.  Traditional data security practices can impact IP telephony voice quality if not engineered correctly.  So, a converged network must be designed to comply with IT security policies while not impeding the performance of critical network applications.   Converged security from Consolidated Technologies, Inc. (CTI) starts with a Security Assessment, to identify network “gaps” that can be exploited by an attacker. Security Policy Development defines the procedures, responsibilities, controls and security measures required to protect assets in a converged environment. Security Architecture & Design brings CTI expertise to the complex task of designing a secure information infrastructure and ensures that the security measures defined in a policy are designed into the security framework.    The combination of converged security policies and security assessments create a foundation that enables enterprises to plan, implement, and manage the comprehensive architecture and controls needed for protection in a converged network.  This ensures secure and continuous communications, while improving Quality of Service (QoS), and the ability to maintain and monitor multi-vendor, converged networks and applications.  It also provides the framework and capabilities to allow business to comply with Security & Privacy Regulations, such as Sarbanes-Oxley, Gramm-Leach-Bliley, HIPPA, and Basel II.