Secure Implementation of SIP Trunks for Voice: A Qualitative Study

Organizations managing their own multi-line phone system are concerned about their telecommunication engineer’s ability to secure the SIP trunks properly. Billions of dollars are lost globally each year through exploited security vulnerabilities in Session Initiation Protocol (SIP) trunks. Grounded in the knowledge-based view of the firm as the theoretical framework, the purpose of this qualitative multiple case study was to explore strategies used by telecommunications engineers to implement SIP trunks for voice communications securely. Six voice professionals in the United States volunteered as participants, having completed their own successful, secure SIP implementations for their organizations. Data were collected using semistructured interviews and a review of documentation. Data was analyzed using thematic analysis, and three themes emerged: (a) education and experience, (b) resources and support, and (c) secure configurations. A key recommendation for organizations to consider is cross-training voice teams with networking teams. The implication for a positive social change includes the potential for telecommunications engineers to secure SIP implementations for their organizations, potentially reducing financial losses through SIP vulnerabilities.